crypto: af_alg_restrict cleanups

[PATCH 0/3] crypto: af_alg_restrict cleanups

Eric Biggers posted 3 patches 2 months ago

Download series mbox

crypto/af_alg.c         | 10 +++++++---
crypto/algif_aead.c     |  2 +-
crypto/algif_hash.c     | 28 ++++++++++++++--------------
crypto/algif_skcipher.c | 28 ++++++++++++++--------------
include/crypto/if_alg.h |  6 +++++-
5 files changed, 41 insertions(+), 33 deletions(-)

Expand all Fold all

[PATCH 0/3] crypto: af_alg_restrict cleanups

Posted by Eric Biggers 2 months ago

- Make cbc(paes) privileged-only for now, as previously discussed
- Make it more explicit when unprivileged use is allowed
- Avoid some redundant work during allowlist checking

Eric Biggers (3):
  crypto: af_alg - Make cbc(paes) privileged-only
  crypto: af_alg - Replace 'bool privileged' with flags
  crypto: af_alg - Stop after finding name in allowlist

 crypto/af_alg.c         | 10 +++++++---
 crypto/algif_aead.c     |  2 +-
 crypto/algif_hash.c     | 28 ++++++++++++++--------------
 crypto/algif_skcipher.c | 28 ++++++++++++++--------------
 include/crypto/if_alg.h |  6 +++++-
 5 files changed, 41 insertions(+), 33 deletions(-)


base-commit: 947d62c094367ef6064907d570b47612cd579df6
-- 
2.55.0

Re: [PATCH 0/3] crypto: af_alg_restrict cleanups

Posted by Herbert Xu 1 month, 3 weeks ago

On Sun, Aug 02, 2026 at 04:00:52PM -0700, Eric Biggers wrote:
> - Make cbc(paes) privileged-only for now, as previously discussed
> - Make it more explicit when unprivileged use is allowed
> - Avoid some redundant work during allowlist checking
> 
> Eric Biggers (3):
>   crypto: af_alg - Make cbc(paes) privileged-only
>   crypto: af_alg - Replace 'bool privileged' with flags
>   crypto: af_alg - Stop after finding name in allowlist
> 
>  crypto/af_alg.c         | 10 +++++++---
>  crypto/algif_aead.c     |  2 +-
>  crypto/algif_hash.c     | 28 ++++++++++++++--------------
>  crypto/algif_skcipher.c | 28 ++++++++++++++--------------
>  include/crypto/if_alg.h |  6 +++++-
>  5 files changed, 41 insertions(+), 33 deletions(-)
> 
> 
> base-commit: 947d62c094367ef6064907d570b47612cd579df6
> -- 
> 2.55.0

All applied.  Thanks.
-- 
Email: Herbert Xu <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt