diff options
| author | Mark Brown <[email protected]> | 2015-10-12 18:09:27 +0100 | 
|---|---|---|
| committer | Mark Brown <[email protected]> | 2015-10-12 18:09:27 +0100 | 
| commit | 79828b4fa835f73cdaf4bffa48696abdcbea9d02 (patch) | |
| tree | 5e0fa7156acb75ba603022bc807df8f2fedb97a8 /kernel/system_keyring.c | |
| parent | 721b51fcf91898299d96f4b72cb9434cda29dce6 (diff) | |
| parent | 8c1a9d6323abf0fb1e5dad96cf3f1c783505ea5a (diff) | |
Merge remote-tracking branch 'asoc/fix/rt5645' into asoc-fix-rt5645
Diffstat (limited to 'kernel/system_keyring.c')
| -rw-r--r-- | kernel/system_keyring.c | 106 | 
1 files changed, 0 insertions, 106 deletions
diff --git a/kernel/system_keyring.c b/kernel/system_keyring.c deleted file mode 100644 index 875f64e8935b..000000000000 --- a/kernel/system_keyring.c +++ /dev/null @@ -1,106 +0,0 @@ -/* System trusted keyring for trusted public keys - * - * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved. - * Written by David Howells ([email protected]) - * - * This program is free software; you can redistribute it and/or - * modify it under the terms of the GNU General Public Licence - * as published by the Free Software Foundation; either version - * 2 of the Licence, or (at your option) any later version. - */ - -#include <linux/export.h> -#include <linux/kernel.h> -#include <linux/sched.h> -#include <linux/cred.h> -#include <linux/err.h> -#include <keys/asymmetric-type.h> -#include <keys/system_keyring.h> -#include "module-internal.h" - -struct key *system_trusted_keyring; -EXPORT_SYMBOL_GPL(system_trusted_keyring); - -extern __initconst const u8 system_certificate_list[]; -extern __initconst const unsigned long system_certificate_list_size; - -/* - * Load the compiled-in keys - */ -static __init int system_trusted_keyring_init(void) -{ -	pr_notice("Initialise system trusted keyring\n"); - -	system_trusted_keyring = -		keyring_alloc(".system_keyring", -			      KUIDT_INIT(0), KGIDT_INIT(0), current_cred(), -			      ((KEY_POS_ALL & ~KEY_POS_SETATTR) | -			      KEY_USR_VIEW | KEY_USR_READ | KEY_USR_SEARCH), -			      KEY_ALLOC_NOT_IN_QUOTA, NULL); -	if (IS_ERR(system_trusted_keyring)) -		panic("Can't allocate system trusted keyring\n"); - -	set_bit(KEY_FLAG_TRUSTED_ONLY, &system_trusted_keyring->flags); -	return 0; -} - -/* - * Must be initialised before we try and load the keys into the keyring. - */ -device_initcall(system_trusted_keyring_init); - -/* - * Load the compiled-in list of X.509 certificates. - */ -static __init int load_system_certificate_list(void) -{ -	key_ref_t key; -	const u8 *p, *end; -	size_t plen; - -	pr_notice("Loading compiled-in X.509 certificates\n"); - -	p = system_certificate_list; -	end = p + system_certificate_list_size; -	while (p < end) { -		/* Each cert begins with an ASN.1 SEQUENCE tag and must be more -		 * than 256 bytes in size. -		 */ -		if (end - p < 4) -			goto dodgy_cert; -		if (p[0] != 0x30 && -		    p[1] != 0x82) -			goto dodgy_cert; -		plen = (p[2] << 8) | p[3]; -		plen += 4; -		if (plen > end - p) -			goto dodgy_cert; - -		key = key_create_or_update(make_key_ref(system_trusted_keyring, 1), -					   "asymmetric", -					   NULL, -					   p, -					   plen, -					   ((KEY_POS_ALL & ~KEY_POS_SETATTR) | -					   KEY_USR_VIEW | KEY_USR_READ), -					   KEY_ALLOC_NOT_IN_QUOTA | -					   KEY_ALLOC_TRUSTED); -		if (IS_ERR(key)) { -			pr_err("Problem loading in-kernel X.509 certificate (%ld)\n", -			       PTR_ERR(key)); -		} else { -			set_bit(KEY_FLAG_BUILTIN, &key_ref_to_ptr(key)->flags); -			pr_notice("Loaded X.509 cert '%s'\n", -				  key_ref_to_ptr(key)->description); -			key_ref_put(key); -		} -		p += plen; -	} - -	return 0; - -dodgy_cert: -	pr_err("Problem parsing in-kernel X.509 certificate list\n"); -	return 0; -} -late_initcall(load_system_certificate_list);  |