Eric Biggers 93edd392ca fscrypt: support passing a keyring key to FS_IOC_ADD_ENCRYPTION_KEY ... Extend the FS_IOC_ADD_ENCRYPTION_KEY ioctl to allow the raw key to be specified by a Linux keyring key, rather than specified directly. This is useful because fscrypt keys belong to a particular filesystem instance, so they are destroyed when that filesystem is unmounted. Usually this is desired. But in some cases, userspace may need to unmount and re-mount the filesystem while keeping the keys, e.g. during a system update. This requires keeping the keys somewhere else too. The keys could be kept in memory in a userspace daemon. But depending on the security architecture and assumptions, it can be preferable to keep them only in kernel memory, where they are unreadable by userspace. We also can't solve this by going back to the original fscrypt API (where for each file, the master key was looked up in the process's keyring hierarchy) because that caused lots of problems of its own. Therefore, add the ability for FS_IOC_ADD_ENCRYPTION_KEY to accept a Linux keyring key. This solves the problem by allowing userspace to (if needed) save the keys securely in a Linux keyring for re-provisioning, while still using the new fscrypt key management ioctls. This is analogous to how dm-crypt accepts a Linux keyring key, but the key is then stored internally in the dm-crypt data structures rather than being looked up again each time the dm-crypt device is accessed. Use a custom key type "fscrypt-provisioning" rather than one of the existing key types such as "logon". This is strongly desired because it enforces that these keys are only usable for a particular purpose: for fscrypt as input to a particular KDF. Otherwise, the keys could also be passed to any kernel API that accepts a "logon" key with any service prefix, e.g. dm-crypt, UBIFS, or (recently proposed) AF_ALG. This would risk leaking information about the raw key despite it ostensibly being unreadable. Of course, this mistake has already been made for multiple kernel APIs; but since this is a new API, let's do it right. This patch has been tested using an xfstest which I wrote to test it. Link: https://lore.kernel.org/r/20191119222447.226853-1-ebiggers@kernel.org Signed-off-by: Eric Biggers <ebiggers@google.com>		2019-12-31 10:33:49 -06:00
..
ABI	platform/mellanox: fix the mlx-bootctl sysfs	2019-12-20 19:00:50 +02:00
EDID	docs: driver-api: add a series of orphaned documents	2019-07-15 11:03:02 -03:00
PCI	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2019-08-27 14:23:31 -07:00
RCU	Documentation: Rename rcu_node_context_switch() to rcu_note_context_switch()	2019-10-29 02:48:29 -07:00
accounting	docs: add some documentation dirs to the driver-api book	2019-07-15 11:03:02 -03:00
admin-guide	Fixes for 5.5:	2019-12-22 10:59:06 -08:00
arm	ARM: at91: Documentation: update the sama5d3 and armv7m datasheets	2019-09-30 21:39:18 +02:00
arm64	arm64 updates for 5.5:	2019-11-25 15:39:19 -08:00
block	block: add iostat counters for flush requests	2019-11-21 09:06:47 -07:00
bpf	bpf: Add s390 testing documentation	2019-10-30 16:25:31 +01:00
cdrom	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
core-api	powerpc updates for 5.5 #2	2019-12-06 13:36:31 -08:00
cpu-freq	Documentation: cpufreq: Update policy notifier documentation	2019-09-02 22:44:05 +02:00
crypto	crypto: ablkcipher - remove deprecated and unused ablkcipher support	2019-11-17 09:02:49 +08:00
dev-tools	kunit: Rename 'kunitconfig' to '.kunitconfig'	2019-12-23 10:52:41 -07:00
devicetree	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2019-12-22 09:54:33 -08:00
doc-guide	kernel-doc: rename the kernel-doc directive 'functions' to 'identifiers'	2019-11-07 13:17:25 -07:00
driver-api	Merge branch 'thermal/next' of git://git.kernel.org/pub/scm/linux/kernel/git/thermal/linux	2019-12-05 11:21:24 -08:00
fault-injection	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
fb	docs conversion for v5.3-rc1	2019-07-16 12:21:41 -07:00
features	xtensa: update arch features	2019-10-20 23:48:28 -07:00
filesystems	fscrypt: support passing a keyring key to FS_IOC_ADD_ENCRYPTION_KEY	2019-12-31 10:33:49 -06:00
firmware-guide	ACPI: Documentation: Minor spelling fix in namespace.rst	2019-10-14 11:03:44 +02:00
firmware_class	…
fpga	Documentation: fpga: dfl: add descriptions for thermal/power management interfaces	2019-10-16 19:18:26 -07:00
gpu	drm/amdgpu: Improve RAS documentation (v2)	2019-11-06 16:27:48 -05:00
hid	docs: add some documentation dirs to the driver-api book	2019-07-15 11:03:02 -03:00
hwmon	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
i2c	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
ia64	docs: add SPDX tags to new index files	2019-07-15 11:03:03 -03:00
ide	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
iio	docs: add some documentation dirs to the driver-api book	2019-07-15 11:03:02 -03:00
infiniband	Documentation/infiniband: update name of some functions	2019-09-13 16:55:55 -03:00
input	Input: docs: fix spelling mistake "potocol" -> "protocol"	2019-08-06 11:24:49 -06:00
isdn	docs: isdn: convert to ReST and add to kAPI bookset	2019-07-31 13:30:25 -06:00
kbuild	kbuild: clarify the difference between obj-y and obj-m w.r.t. descending	2019-12-22 00:25:35 +09:00
kernel-hacking	docs: Add documentation for Symbol Namespaces	2019-09-10 10:30:49 +02:00
leds	leds: core: Add support for composing LED class device names	2019-07-25 20:07:52 +02:00
livepatch	livepatch: Documentation of the new API for tracking system state changes	2019-11-01 13:08:24 +01:00
locking	doc🔒 remove reference to clever use of read-write lock	2019-09-14 01:53:27 -06:00
m68k	docs: README.buddha: convert to ReST and add to m68k book	2019-07-31 13:30:10 -06:00
maintainer	docs: fix up the maintainer profile document	2019-11-25 08:42:12 -07:00
media	media: Documentation: media: *_DEFAULT targets for subdevs	2019-11-10 17:49:27 +01:00
mic	docs: driver-api: add remaining converted dirs to it	2019-07-15 11:03:03 -03:00
mips	docs: fix some broken references	2019-10-10 11:25:39 -06:00
misc-devices	docs: misc: xilinx_sdfec: Actually add documentation	2019-10-11 10:01:27 -06:00
netlabel	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
networking	linux-can-fixes-for-5.5-20191208	2019-12-09 09:27:47 -08:00
nios2	docs: nios2: add it to the main Documentation body	2019-07-31 13:31:51 -06:00
nvdimm	libnvdimm, MAINTAINERS: Maintainer Entry Profile	2019-11-25 08:34:54 -07:00
openrisc	docs: openrisc: convert to ReST and add to documentation body	2019-07-31 13:30:20 -06:00
parisc	docs: parisc: convert to ReST and add to documentation body	2019-07-31 13:30:15 -06:00
pcmcia	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
power	pci-v5.5-changes	2019-12-03 13:58:22 -08:00
powerpc	powerpc/fsl_booke/32: Document KASLR implementation	2019-11-13 19:27:58 +11:00
process	treewide: Use sizeof_field() macro	2019-12-09 10:36:44 -08:00
riscv	riscv-docs: correct the sequence of the magic number 2 since it's little endian	2019-10-03 10:51:42 -06:00
s390	Documentation/s390: remove outdated debugging390 documentation	2019-08-21 12:41:43 +02:00
scheduler	Documentation/scheduler: fix links in sched-stats	2019-10-29 04:35:41 -06:00
scsi	scsi: smartpqi: Update attribute name to `driver_version`	2019-12-09 19:17:36 -05:00
security	Documentation: security: core.rst: fix warnings	2019-11-22 10:01:47 -07:00
sh	docs: remove extra conf.py files	2019-07-17 06:57:52 -03:00
sound	ALSA: docs: Update about the new PCM sync_stop ops	2019-11-20 19:39:54 +01:00
sparc	docs: add arch doc directories to the index	2019-07-15 11:03:01 -03:00
sphinx	docs, parallelism: Rearrange how jobserver reservations are made	2019-11-22 10:35:18 -07:00
sphinx-static	doc-rst: Reduce CSS padding around Field	2019-10-02 10:03:06 -06:00
spi	spi: docs: convert to ReST and add it to the kABI bookset	2019-07-31 14:13:13 -06:00
target	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
timers	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
trace	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
translations	treewide: Use sizeof_field() macro	2019-12-09 10:36:44 -08:00
usb	USB: rio500: Remove Rio 500 kernel driver	2019-10-04 10:53:36 +02:00
userspace-api	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
virt	KVM: Add support for secure guests under the Protected Execution	2019-11-29 19:20:08 +01:00
virtual	cpuidle: add haltpoll governor	2019-07-30 17:27:37 +02:00
vm	mm/hmm: remove hmm_mirror and related	2019-11-23 19:56:45 -04:00
w1	docs: w1: Fix SPDX-License-Identifier syntax	2019-10-18 09:45:56 -06:00
watchdog	linux-watchdog 5.4-rc1 tag	2019-09-27 11:17:38 -07:00
x86	Merge branch 'x86-boot-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2019-11-26 08:40:20 -08:00
xtensa	docs: add arch doc directories to the index	2019-07-15 11:03:01 -03:00
.gitignore	…
COPYING-logo	docs: logo.txt: rename it to COPYING-logo	2019-07-15 09:20:27 -03:00
Changes	…
CodingStyle	…
DMA-API-HOWTO.txt	docs: DMA-API-HOWTO.txt: fix an unmarked code block	2019-07-15 09:20:24 -03:00
DMA-API.txt	dma-mapping: remove dma_release_declared_memory	2019-09-04 11:13:19 +02:00
DMA-ISA-LPC.txt	…
DMA-attributes.txt	dma-mapping: remove the DMA_ATTR_WRITE_BARRIER flag	2019-11-14 12:01:54 -04:00
IPMI.txt	…
IRQ-affinity.txt	…
IRQ-domain.txt	…
IRQ.txt	…
Kconfig	docs: Kbuild/Makefile: allow check for missing docs at build time	2019-06-07 11:33:16 -06:00
Makefile	Kbuild updates for v5.5	2019-12-02 17:35:04 -08:00
SubmittingPatches	…
asm-annotations.rst	x86/ftrace: Get rid of function_hook	2019-10-25 10:52:22 +02:00
atomic_bitops.txt	docs: atomic_bitops.txt: add a title for this document	2019-04-11 12:37:02 -06:00
atomic_t.txt	Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2019-07-08 16:12:03 -07:00
bus-virt-phys-mapping.txt	…
conf.py	doc-rst: Programmatically render MAINTAINERS into ReST	2019-10-02 10:03:17 -06:00
crc32.txt	…
debugging-modules.txt	…
debugging-via-ohci1394.txt	…
digsig.txt	…
docutils.conf	doc-rst: Add missing newline at end of file	2019-06-20 14:16:56 -06:00
dontdiff	modpost: dump missing namespaces into a single modules.nsdeps file	2019-11-11 20:10:01 +09:00
futex-requeue-pi.txt	…
hwspinlock.txt	hwspinlock: add the 'in_atomic' API	2019-06-29 21:08:14 -07:00
index.rst	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
io-mapping.txt	…
io_ordering.txt	…
irqflags-tracing.txt	…
kobject.txt	…
kprobes.txt	Merge branch 'parisc-5.2-1' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux	2019-05-07 19:34:17 -07:00
kref.txt	…
logo.gif	…
lzo.txt	lib/lzo: fix bugs for very short or empty input	2019-04-05 16:02:30 -10:00
mailbox.txt	…
memory-barriers.txt	docs/memory-barriers.txt: Remove remaining references to mmiowb()	2019-11-22 10:00:46 -07:00
nommu-mmap.txt	…
padata.txt	padata: allocate workqueue internally	2019-09-13 21:15:39 +10:00
percpu-rw-semaphore.txt	…
pi-futex.txt	docs: locking: convert docs to ReST and rename to *.rst	2019-07-15 08:53:27 -03:00
preempt-locking.txt	x86/fpu: Remove fpu__restore()	2019-04-09 19:27:42 +02:00
rbtree.txt	docs: rbtree.txt: fix Sphinx build warnings	2019-07-15 09:20:24 -03:00
remoteproc.txt	remoteproc: add vendor resources handling	2019-06-29 12:02:17 -07:00
robust-futex-ABI.txt	…
robust-futexes.txt	futex: Update comments and docs about return values of arch futex code	2019-04-26 13:57:55 +01:00
rpmsg.txt	…
speculation.txt	docs: speculation.txt: mark example blocks as such	2019-04-11 12:37:03 -06:00
static-keys.txt	…
tee.txt	Documentation: tee: Grammar s/the its/its/	2019-06-07 11:23:38 -06:00
this_cpu_ops.txt	…
unaligned-memory-access.txt	docs: unaligned-memory-access.txt: use a lowercase title	2019-04-11 12:37:03 -06:00
xz.txt	…