keys: Pass the network namespace into request_key mechanism
authorDavid Howells <dhowells@redhat.com>
Wed, 26 Jun 2019 20:02:33 +0000 (21:02 +0100)
committerDavid Howells <dhowells@redhat.com>
Thu, 27 Jun 2019 22:02:12 +0000 (23:02 +0100)
commita58946c158a040068e7c94dc1d58bbd273258068
treee655258b700359cdfd9f762c099b7587dc0eed9b
parent9b242610514fe387ef957bce05e1fdd3efd60359
keys: Pass the network namespace into request_key mechanism

Create a request_key_net() function and use it to pass the network
namespace domain tag into DNS revolver keys and rxrpc/AFS keys so that keys
for different domains can coexist in the same keyring.

Signed-off-by: David Howells <dhowells@redhat.com>
cc: netdev@vger.kernel.org
cc: linux-nfs@vger.kernel.org
cc: linux-cifs@vger.kernel.org
cc: linux-afs@lists.infradead.org
16 files changed:
Documentation/security/keys/core.rst
Documentation/security/keys/request-key.rst
fs/afs/addr_list.c
fs/afs/dynroot.c
fs/cifs/dns_resolve.c
fs/nfs/dns_resolve.c
fs/nfs/nfs4idmap.c
include/linux/dns_resolver.h
include/linux/key.h
net/ceph/messenger.c
net/dns_resolver/dns_query.c
net/rxrpc/key.c
security/keys/internal.h
security/keys/keyctl.c
security/keys/keyring.c
security/keys/request_key.c