KEYS: Allow keyctl_revoke() on keys that have SETATTR but not WRITE perm [try #6]
authorDavid Howells <dhowells@redhat.com>
Wed, 2 Sep 2009 08:13:50 +0000 (09:13 +0100)
committerJames Morris <jmorris@namei.org>
Wed, 2 Sep 2009 11:29:06 +0000 (21:29 +1000)
commit0c2c9a3fc77e8b60d43d9bd2ca46eb4dddb0ff76
treee718aa64ab3b5d4fd73f7a837ee9ea0debfcc773
parent5593122eec26b061cc0b6fbff32118f1aadf4a27
KEYS: Allow keyctl_revoke() on keys that have SETATTR but not WRITE perm [try #6]

Allow keyctl_revoke() to operate on keys that have SETATTR but not WRITE
permission, rather than only on keys that have WRITE permission.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/keys/keyctl.c