security/keys/process_keys.c

221 int install_thread_keyring_to_cred(struct cred *new)
225 	if (new->thread_keyring)
228 	keyring = keyring_alloc("_tid", new->uid, new->gid, new,
235 	new->thread_keyring = keyring;
246 	struct cred *new;
249 	new = prepare_creds();
250 	if (!new)
253 	ret = install_thread_keyring_to_cred(new);
255 		abort_creds(new);
259 	return commit_creds(new);
268 int install_process_keyring_to_cred(struct cred *new)
272 	if (new->process_keyring)
275 	keyring = keyring_alloc("_pid", new->uid, new->gid, new,
282 	new->process_keyring = keyring;
293 	struct cred *new;
296 	new = prepare_creds();
297 	if (!new)
300 	ret = install_process_keyring_to_cred(new);
302 		abort_creds(new);
306 	return commit_creds(new);
312  * then install a new anonymous session keyring.
352  * install a new anonymous session keyring.
358 	struct cred *new;
361 	new = prepare_creds();
362 	if (!new)
365 	ret = install_session_keyring_to_cred(new, keyring);
367 		abort_creds(new);
371 	return commit_creds(new);
818 	/* if we attempted to install a keyring, then it may have caused new
828  * create a new one of that name and join that.
840 	struct cred *new;
844 	new = prepare_creds();
845 	if (!new)
851 		ret = install_session_keyring_to_cred(new, NULL);
855 		serial = new->session_keyring->serial;
856 		ret = commit_creds(new);
868 		/* not found - try and create a new one */
880 	} else if (keyring == new->session_keyring) {
886 	ret = install_session_keyring_to_cred(new, keyring);
890 	commit_creds(new);
903 	abort_creds(new);
914 	struct cred *new = container_of(twork, struct cred, rcu);
917 		put_cred(new);
924 		put_cred(new);
928 	new->  uid	= old->  uid;
929 	new-> euid	= old-> euid;
930 	new-> suid	= old-> suid;
931 	new->fsuid	= old->fsuid;
932 	new->  gid	= old->  gid;
933 	new-> egid	= old-> egid;
934 	new-> sgid	= old-> sgid;
935 	new->fsgid	= old->fsgid;
936 	new->user	= get_uid(old->user);
937 	new->ucounts	= old->ucounts;
938 	new->user_ns	= get_user_ns(old->user_ns);
939 	new->group_info	= get_group_info(old->group_info);
941 	new->securebits	= old->securebits;
942 	new->cap_inheritable	= old->cap_inheritable;
943 	new->cap_permitted	= old->cap_permitted;
944 	new->cap_effective	= old->cap_effective;
945 	new->cap_ambient	= old->cap_ambient;
946 	new->cap_bset		= old->cap_bset;
948 	new->jit_keyring	= old->jit_keyring;
949 	new->thread_keyring	= key_get(old->thread_keyring);
950 	new->process_keyring	= key_get(old->process_keyring);
952 	security_transfer_creds(new, old);
954 	commit_creds(new);