• David Howells's avatar
    KEYS: Skip key state checks when checking for possession · 61ea0c0b
    David Howells authored
    Skip key state checks (invalidation, revocation and expiration) when checking
    for possession.  Without this, keys that have been marked invalid, revoked
    keys and expired keys are not given a possession attribute - which means the
    possessor is not granted any possession permits and cannot do anything with
    them unless they also have one a user, group or other permit.
    
    This causes failures in the keyutils test suite's revocation and expiration
    tests now that commit 96b5c8fe reduced the
    initial permissions granted to a key.
    
    The failures are due to accesses to revoked and expired keys being given
    EACCES instead of EKEYREVOKED or EKEYEXPIRED.
    Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
    61ea0c0b
request_key_auth.c 6.58 KB