)]}' { "log": [ { "commit": "b902f4442f0d5344b19e332b336f190ff67c4779", "tree": "dcf2d991a1f6d69bd6ff244971ba4ec95d6d0bfb", "parents": [ "c076dff259e99d84d3822b4d2ad7f3f66532f411" ], "author": { "name": "Pratyush Yadav", "email": "ptyadav@amazon.de", "time": "Fri Feb 14 14:28:59 2025 +0000" }, "committer": { "name": "Pratyush Yadav", "email": "ptyadav@amazon.de", "time": "Fri Feb 14 14:28:59 2025 +0000" }, "message": "Revert \"DNS: Support AFS SRV records and cell db config files\"\n\nThis reverts commit 0d71523ab58493e1b40e1c80d569ff8ebc5ea27d.\n" }, { "commit": "c076dff259e99d84d3822b4d2ad7f3f66532f411", "tree": "0f3d5a57ab30cbc3ba39b7cd54091f2547772908", "parents": [ "2939c50f7fdd0105e3ddcafab525bfa32c34981c" ], "author": { "name": "Pavel Reichl", "email": "preichl@redhat.com", "time": "Tue Dec 20 14:13:29 2022 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Mar 20 16:32:10 2023 +0000" }, "message": "test: Fix test expectation based on kernel config\n\nSome test results are dependent on the kernel configuration option\nCONFIG_SYSTEM_BLACKLIST_AUTH_UPDATE.\n\nCheck the kernel configuration file for its presence and expect appropriate\ntest results.\n\nFunction has_kernel_config is based on its xfstsests counterpart.\n\nSigned-off-by: Pavel Reichl \u003cpreichl@redhat.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "2939c50f7fdd0105e3ddcafab525bfa32c34981c", "tree": "cf7694d428aa93ce4f5e7316ba3e51f538b9a66b", "parents": [ "4e58e9a45b87f9409d80a559984a3405d8d5a975" ], "author": { "name": "Pavel Reichl", "email": "preichl@redhat.com", "time": "Tue Dec 20 14:13:28 2022 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Mar 20 16:32:10 2023 +0000" }, "message": "keyutils.spec - change the Url\n\nSigned-off-by: Pavel Reichl \u003cpreichl@redhat.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "4e58e9a45b87f9409d80a559984a3405d8d5a975", "tree": "e08205fff4a1c2aa49ea7e2e7b1c5477c4461f79", "parents": [ "ac2d0f3340a819362da460a35dc8e0cd81c0e004" ], "author": { "name": "Daniel Hill", "email": "daniel@gluo.nz", "time": "Tue Feb 28 16:57:52 2023 +1300" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Mar 20 16:31:53 2023 +0000" }, "message": "Provide a pkgconfig file with libkeyutils.a\n\nSigned-off-by: Daniel Hill \u003cdaniel@gluo.nz\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nLink: https://lore.kernel.org/r/CAMtG\u003d2qKrGC-QzPENXsV8_7VBbi6sEnA6joV\u003dSL8MQP1pfV8KA@mail.gmail.com/\n" }, { "commit": "ac2d0f3340a819362da460a35dc8e0cd81c0e004", "tree": "d4ebccb34f3e4a793f9a91eb5fb228063d3db820", "parents": [ "81a8c963db50681c7470dcfe8fe6c79a70d7aadd" ], "author": { "name": "Alyssa Ross", "email": "hi@alyssa.is", "time": "Wed Mar 01 13:42:50 2023 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Mar 20 15:10:34 2023 +0000" }, "message": "Fix format specifier for pointer subtraction\n\nResolves the following compiler error:\n\nkeyctl_watch.c: In function \u0027consumer\u0027:\nkeyctl_watch.c:177:61: error: format \u0027%zx\u0027 expects argument of type \u0027size_t\u0027, but argument 3 has type \u0027int\u0027 [-Werror\u003dformat\u003d]\n 177 | fprintf(stderr, \"NOTIFY[%03zx]: ty\u003d%06x sy\u003d%02x i\u003d%08x\\n\",\n | ~~~~^\n | |\n | long unsigned int\n | %03x\n 178 | p - buffer, n.n.type, n.n.subtype, n.n.info);\n | ~~~~~~~~~~\n | |\n | int\n\nSigned-off-by: Alyssa Ross \u003chi@alyssa.is\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nLink: https://lore.kernel.org/r/20230301134250.301819-1-hi@alyssa.is/\n" }, { "commit": "81a8c963db50681c7470dcfe8fe6c79a70d7aadd", "tree": "e57ed6742eb411dc2dee7ebe23e145e04c84d4ba", "parents": [ "046d2e924932cebe6c0c8177c07830f9d3edea0d" ], "author": { "name": "Vladis Dronov", "email": "vdronov@redhat.com", "time": "Tue May 10 13:04:44 2022 +0200" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Mar 20 15:06:53 2023 +0000" }, "message": "man: fix a formatting on the keyctl.1 man page\n\nFix a formatting and a command output on\nthe keyctl.1 man page in a couple of places.\n\nSigned-off-by: Vladis Dronov \u003cvdronov@redhat.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nLink: https://lore.kernel.org/r/20220510110444.14192-1-vdronov@redhat.com/\n" }, { "commit": "046d2e924932cebe6c0c8177c07830f9d3edea0d", "tree": "ceea8dcb8ecf259e469095dbf904c141379e125d", "parents": [ "cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Mar 20 15:04:47 2023 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Mar 20 15:04:47 2023 +0000" }, "message": "Ignore the cxx.stamp file\n\nIgnore the cxx.stamp file created during the build.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\n" }, { "commit": "cb3bb194cca88211cbfcdde2f10c0f43c3fb8ec3", "tree": "723bc12b41cde925b6c7d0310d5d921d2826edb5", "parents": [ "496a09a43713cfe09877fcba82db72ce5902f781" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 17:02:31 2020 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 17:04:37 2020 +0100" }, "message": "Move to version 1.6.3\n" }, { "commit": "496a09a43713cfe09877fcba82db72ce5902f781", "tree": "b4caf269872728a5ca8cdc946ce7aaf845867d7d", "parents": [ "1570dce7a114e8b907e7b80c56bb798a888675c6" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Oct 31 13:22:23 2019 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 16:58:07 2020 +0100" }, "message": "Add the ability to supply filters to watches set with keyctl\n\nAdd the ability to supply filters to watches set with \"keyctl watch\" and\n\"keyctl watch_session\".\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "1570dce7a114e8b907e7b80c56bb798a888675c6", "tree": "c23664ef9f594a6dabb1ab917fb542e08b73e3c8", "parents": [ "1276eac95470369bfc1de3ae26103992ab8e4e9a" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Oct 31 13:22:22 2019 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 16:58:00 2020 +0100" }, "message": "test: Use notifications in testing\n\nMake the testing infrastructure do automatic checking for notifications as\ntests manipulate keys.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "1276eac95470369bfc1de3ae26103992ab8e4e9a", "tree": "1c77dc009f2441f3e8dd3657bf471d42266a4747", "parents": [ "f3095f4901820d31cc5600ee46949bcdb246b3fa" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Oct 31 13:22:22 2019 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 16:57:54 2020 +0100" }, "message": "Add a notification facility for watching for key changes\n\nAdd keyctl commands and library functions to handle the setting and removal\nof watches on keys for notifications of change events. Five keyctl\ncommands are defined:\n\n (1) keyctl watch \u003ckey\u003e\n\n Watch the specified key for changes, logging notifications to stdout.\n\n (2) keyctl watch_session [-n \u003cname\u003e] \u003cnotifylog\u003e \u003cgclog\u003e \u003cfd\u003e prog [\u003carg\u003e...]\n\n Create a new session keyring and attach a watch to it that an\n auxiliary logging process monitors. The nominated program is run with\n the session program with the arguments given.\n\n The session keyring can be given a name. The logging process will log\n synchronous events to file notifylog and asynchronous events to file\n gclog.\n\n The specified file descriptor will be attached to the watch_queue and\n left open across the exec. This can be made use of by the next few\n commands.\n\n (3) keyctl watch_add \u003cfd\u003e \u003ckey\u003e\n (4) keyctl watch_rm \u003cfd\u003e \u003ckey\u003e\n\n Add/remove a watch on the specified key to/from the given watch_queue\n derived from watch_session.\n\n (5) keyctl watch_sync \u003cfd\u003e\n\n Wait for the logging process that\u0027s watching the given watch_queue to\n synchronise.\n\nCommands (2) to (5) are primarily provided for the testsuite\u0027s purposes.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "f3095f4901820d31cc5600ee46949bcdb246b3fa", "tree": "43f12abc498a8e06f137a328662ceca15e781ec9", "parents": [ "d00ed3599d5fccf81eac32eada0c1b33e67ba973" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 16:56:53 2020 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 16:56:53 2020 +0100" }, "message": "Revert \"Add a notification facility for watching for key changes\"\n\nThis reverts commit 1aafbdcf1d60c5c9eb34fe404f9a9195c8ea415e which was from\nthe wrong branch and expects /dev/watch_queue to be available.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "d00ed3599d5fccf81eac32eada0c1b33e67ba973", "tree": "7cbe46121e9132a10c85ae0e12da76a6c2fe30d8", "parents": [ "5242250d775882c2a26e9c6e69d9e58d9be38fb4" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 16:56:36 2020 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 16:56:36 2020 +0100" }, "message": "Revert \"test: Use notifications in testing\"\n\nThis reverts commit 9419ac428efe8385cb2c19680d6b90c90e5335d1 which was from\nthe wrong branch and expects /dev/watch_queue to be available.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "5242250d775882c2a26e9c6e69d9e58d9be38fb4", "tree": "c8d59d019b0edd76823147b096fe4ca9858556fc", "parents": [ "454f80f537e5d1aad506599b6776e4cc1cf5f0f2" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 16:55:41 2020 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jul 07 16:55:41 2020 +0100" }, "message": "Revert \"Add the ability to supply filters to watches set with keyctl\"\n\nThis reverts commit 5ac409b01cc4fcb69d903408da90df2d34d4f32a which was from\nthe wrong branch and expects /dev/watch_queue to be available.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "454f80f537e5d1aad506599b6776e4cc1cf5f0f2", "tree": "a5b94d6bdbed92cfd9357fc756f49d4c9302068b", "parents": [ "6f1af30db1c9308198b958e14c63980e87078ef2" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 02 16:47:39 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 18:05:32 2020 +0100" }, "message": "Version 1.6.2\n" }, { "commit": "6f1af30db1c9308198b958e14c63980e87078ef2", "tree": "ba5dbd069ea560e2cd55ab09c8b960eb93f45d38", "parents": [ "b7cffce8cfa3453f2ccdfd28bcab4cf85af8e88d" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 18:04:48 2020 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 18:05:19 2020 +0100" }, "message": "Build: Remove libkeyutils.pc on make clean\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "b7cffce8cfa3453f2ccdfd28bcab4cf85af8e88d", "tree": "0b5f0274c6a6aff6fd0337c44f90954e380fcc76", "parents": [ "991c272062a4300bbd5fe22dce17ab2fb5126e3f" ], "author": { "name": "Christophe Vu-Brugier", "email": "cvubrugier@fastmail.fm", "time": "Thu Jul 02 10:57:23 2020 +0200" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 18:00:28 2020 +0100" }, "message": "Fix error when a C++ program is linked with libkeyutils\n\nDeclare all the functions as extern \"C\" in keyutils.h to instruct a\nC++ compiler that these functions are not mangled.\n\nSigned-off-by: Christophe Vu-Brugier \u003ccvubrugier@fastmail.fm\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "991c272062a4300bbd5fe22dce17ab2fb5126e3f", "tree": "c2b3ec87d8c9391855235a275c2f2b7a4eab54e0", "parents": [ "9b815047340ad7e1d9e3be496b232a29f1b5b232" ], "author": { "name": "Christophe Vu-Brugier", "email": "cvubrugier@fastmail.fm", "time": "Thu Jul 02 10:57:22 2020 +0200" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 18:00:28 2020 +0100" }, "message": "Check that keyutils.h has valid C++ syntax at build time\n\nSigned-off-by: Christophe Vu-Brugier \u003ccvubrugier@fastmail.fm\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "9b815047340ad7e1d9e3be496b232a29f1b5b232", "tree": "cfdc3e59484eb592291d94fb22186f527b9d422e", "parents": [ "839b6280b9da081d4a051fa7ffc6e5b516024c7d" ], "author": { "name": "Christophe Vu-Brugier", "email": "cvubrugier@fastmail.fm", "time": "Thu Jul 02 10:57:21 2020 +0200" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 18:00:28 2020 +0100" }, "message": "Fix compilation error when keyutils.h is used in C++\n\nThe declaration of the keyctl_dh_compute_kdf() function contains a\nparameter named \"private\". Unfortunately, \"private\" is a C++ reserved\nkeyword. As a consequence, compiling a C++ program that includes\nkeyutils.h fails.\n\nThis patch renames the \"private\" variable to \"priv\" since a similar\nparameter is named this way in the nearby keyctl_dh_compute()\nfunction.\n\nSigned-off-by: Christophe Vu-Brugier \u003ccvubrugier@fastmail.fm\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "839b6280b9da081d4a051fa7ffc6e5b516024c7d", "tree": "07a30688fab1785048ec9852f3a6e507fcb0ed80", "parents": [ "5ac409b01cc4fcb69d903408da90df2d34d4f32a" ], "author": { "name": "Christophe Vu-Brugier", "email": "cvubrugier@fastmail.fm", "time": "Thu Jul 02 10:57:20 2020 +0200" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 18:00:28 2020 +0100" }, "message": "man: fix typos\n\nSigned-off-by: Christophe Vu-Brugier \u003ccvubrugier@fastmail.fm\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "5ac409b01cc4fcb69d903408da90df2d34d4f32a", "tree": "274a8d817a2b968c816113594638f77886d9beab", "parents": [ "9419ac428efe8385cb2c19680d6b90c90e5335d1" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Sep 03 11:04:42 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 18:00:28 2020 +0100" }, "message": "Add the ability to supply filters to watches set with keyctl\n\nAdd the ability to supply filters to watches set with \"keyctl watch\" and\n\"keyctl watch_session\".\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "9419ac428efe8385cb2c19680d6b90c90e5335d1", "tree": "a8f846827ab63f9a2a27325eb41667a9463ab213", "parents": [ "1aafbdcf1d60c5c9eb34fe404f9a9195c8ea415e" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Aug 28 14:01:43 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 18:00:28 2020 +0100" }, "message": "test: Use notifications in testing\n\nMake the testing infrastructure do automatic checking for notifications as\ntests manipulate keys.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "1aafbdcf1d60c5c9eb34fe404f9a9195c8ea415e", "tree": "94a6ac5291a3751c58e121df4df73849acfeb00f", "parents": [ "7846c7a9a7ecbd45648b1e4487fcddd05fa26c84" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Aug 20 15:37:10 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 17:27:20 2020 +0100" }, "message": "Add a notification facility for watching for key changes\n\nAdd keyctl commands and library functions to handle the setting and removal\nof watches on keys for notifications of change events. Five keyctl\ncommands are defined:\n\n (1) keyctl watch \u003ckey\u003e\n\n Watch the specified key for changes, logging notifications to stdout.\n\n (2) keyctl watch_session [-n \u003cname\u003e] \u003cnotifylog\u003e \u003cgclog\u003e \u003cfd\u003e prog [\u003carg\u003e...]\n\n Create a new session keyring and attach a watch to it that an\n auxiliary logging process monitors. The nominated program is run with\n the session program with the arguments given.\n\n The session keyring can be given a name. The logging process will log\n synchronous events to file notifylog and asynchronous events to file\n gclog.\n\n The specified file descriptor will be attached to the watch_queue and\n left open across the exec. This can be made use of by the next few\n commands.\n\n (3) keyctl watch_add \u003cfd\u003e \u003ckey\u003e\n (4) keyctl watch_rm \u003cfd\u003e \u003ckey\u003e\n\n Add/remove a watch on the specified key to/from the given watch_queue\n derived from watch_session.\n\n (5) keyctl watch_sync \u003cfd\u003e\n\n Wait for the logging process that\u0027s watching the given watch_queue to\n synchronise.\n\nCommands (2) to (5) are primarily provided for the testsuite\u0027s purposes.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "7846c7a9a7ecbd45648b1e4487fcddd05fa26c84", "tree": "bb5bb7ca47d2755d3f71d395b33d896d7150e96d", "parents": [ "75e7568dc516db698093b33ea273e1b4a30b70be" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 13:35:13 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 17:27:20 2020 +0100" }, "message": "lib: Open version KEYUTILS_1.10\n\nOpen API version KEYUTILS_1.10 in the shared library.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "75e7568dc516db698093b33ea273e1b4a30b70be", "tree": "3f615a1f9aa9ec35b87d43d9f69f1f3cd7a5372c", "parents": [ "d44a41376b17450c3908978b123e1f05a361885f" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Apr 14 16:07:26 2020 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Jul 06 17:21:18 2020 +0100" }, "message": "dns: Apply a default TTL to records obtained from getaddrinfo()\n\nAddress records obtained from getaddrinfo() don\u0027t come with any TTL\ninformation, even if they\u0027re obtained from the DNS, with the result that\nkey.dns_resolver upcall program doesn\u0027t set an expiry time on dns_resolver\nrecords unless they include a component obtained directly from the DNS,\nsuch as an SRV or AFSDB record.\n\nFix this to apply a default TTL of 10mins in the event that we haven\u0027t got\none. This can be configured in /etc/keyutils/key.dns_resolver.conf by\nadding the line:\n\n\tdefault_ttl \u003d \u003cnumber-of-seconds\u003e\n\nto the file.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nReviewed-by: Ben Boeckel \u003cme@benboeckel.net\u003e\nReviewed-by: Jeff Layton \u003cjlayton@kernel.org\u003e\n" }, { "commit": "d44a41376b17450c3908978b123e1f05a361885f", "tree": "f8968c468ec803cedf6c2bfd92a13cfb1e5a4c3f", "parents": [ "71c2c288d77410da05376bd1e62c5fbb4a139d41" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Apr 14 17:04:25 2020 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon May 18 15:15:46 2020 +0100" }, "message": "Makefile: Use rpmspec to calculate package name\n\nUse the rpmspec program to calculate the package name rather than trying to\nsubstitute macros that keep changing.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "71c2c288d77410da05376bd1e62c5fbb4a139d41", "tree": "3e154884c2fe286a6f71feddef5fadf21d5ced70", "parents": [ "858e238ad1ae8deb74da4984ea132f5c74c08f3b" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Fri May 15 20:23:34 2020 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon May 18 15:03:21 2020 +0100" }, "message": "man: the info strings are actually space or tab separated\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "858e238ad1ae8deb74da4984ea132f5c74c08f3b", "tree": "c652c58f3a62e912108e8f904449fa45c56cde3a", "parents": [ "704802463dd1fd74000132d4325300c718a4b474" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Wed May 13 18:23:06 2020 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon May 18 14:56:06 2020 +0100" }, "message": "man: clarify that keyctl_set_reqkey_keyring(3) returns the old default\n\nThe prose mentions this, but the return value section gave conflicting\ninformation.\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "704802463dd1fd74000132d4325300c718a4b474", "tree": "797c9c45084f10993643b7a1472d8128d2e30d54", "parents": [ "399aef161fe11cefe7d31478cb015eef71ce0bf9" ], "author": { "name": "Maciej S. Szmigiero", "email": "mail@maciej.szmigiero.name", "time": "Tue Oct 29 15:34:51 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Oct 31 12:19:07 2019 +0000" }, "message": "keyctl: try to wipe keys from memory after use\n\nThe key being added or updated likely contains secrets so it would be best\nnot to leave it in memory or in a core dump when no longer needed.\n\nGlibc 2.25+ provides the explicit_bzero() function that can be used for\nthis purpose, let\u0027s utilize it if it is present.\n\nTested by redefining exit(n) to abort() and inspecting the resulting core\nfile for key data.\n\nSigned-off-by: Maciej S. Szmigiero \u003cmail@maciej.szmigiero.name\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "399aef161fe11cefe7d31478cb015eef71ce0bf9", "tree": "69655f86c6625f58f3e389230287d41ae36203d0", "parents": [ "eadebfe47e8b93cd7e6fcc6bfaff66317f50d1d8" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:53:52 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 13:30:10 2019 +0100" }, "message": "tests: Use hex input for keyctl/dh_compute/bad-args\n\nUse keyctl add\u0027s hex input capability for keyctl/dh_compute/bad-args rather\nthan an \"echo -e | keyctl padd\" construct.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "eadebfe47e8b93cd7e6fcc6bfaff66317f50d1d8", "tree": "ba5c708bb76992b97b10f05b94f373b14b716665", "parents": [ "7e34f5795b8fb35e95356a12dceeb714c1aa7f93" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Wed Sep 04 10:30:01 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 13:30:10 2019 +0100" }, "message": "tests/search: test a found key without search permissions\n\nThese stanzas were essentially duplicates of the previous blocks.\n\nFix them to test first disabling Search on the first keyring and then the\nsecond keyring. Also add disabling of Search on the target key and\nchecking searches from the session keyring.\n\n[DH: Modified to fix the searches and add Ben\u0027s change as a separate test\n in its own right]\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "7e34f5795b8fb35e95356a12dceeb714c1aa7f93", "tree": "2f45e707a83fba3d02f25e6aecd2b3951c3fbf69", "parents": [ "11831c5de44f9dec5f42f172cec5189fad60573c" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:21 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:47:43 2019 +0100" }, "message": "tests/search: test searching with a mismatched type\n\nThis should fail because the actually found key has a type mismatch.\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "11831c5de44f9dec5f42f172cec5189fad60573c", "tree": "bbf250d41e096aef0a8d40fb666430c8ce03202a", "parents": [ "1dec0d243fe77b8b5ea41df022c6ff122ab545b6" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:18 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:47:41 2019 +0100" }, "message": "tests/reading: fix test comment\n\nThis comment was copied from another test. This one actually fails\nbecause search permissions were also removed.\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "1dec0d243fe77b8b5ea41df022c6ff122ab545b6", "tree": "ba3088d7c4455bd4a56bcabb5a3be82cdc60da27", "parents": [ "e9606f54857b585bedab29994a5c023bbe4b6696" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:17 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:47:39 2019 +0100" }, "message": "test/instantiating: test bad arguments for `keyctl reject`\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "e9606f54857b585bedab29994a5c023bbe4b6696", "tree": "4621153d54aff3c1d6e33b41f0665dede1d5a538", "parents": [ "ac8ac9a8ac9c205975138a9eebcb2123580ba599" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:16 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:47:38 2019 +0100" }, "message": "tests/instantiating: test the unlinked keyid\n\nTesting the `0` ID just repeats the \"BAD KEY\" tests at the beginning of\nthe file.\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "ac8ac9a8ac9c205975138a9eebcb2123580ba599", "tree": "a859b3cebd891f138bfabcccb8d039640b4b8a9a", "parents": [ "0a4a38780d94b74c85744c9dee0588aeeafd80a5" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:15 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:47:36 2019 +0100" }, "message": "tests/timeout: test actions on an expired keyring as well\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "0a4a38780d94b74c85744c9dee0588aeeafd80a5", "tree": "6e688bd46f0042a34ff27614c458b291948db1d5", "parents": [ "7a2e2679f284b226987daebc4f6f078b19e1066b" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:13 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:47:34 2019 +0100" }, "message": "tests: fix typos in test comments\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "7a2e2679f284b226987daebc4f6f078b19e1066b", "tree": "601f76ad8aca85c368f7c35b2cc10f71c1d37da9", "parents": [ "27bdc9ec1baf6681f666056412afe0cc94105435" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:12 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:47:32 2019 +0100" }, "message": "keyctl: unify spelling of \"unparsable\"\n\nBoth spelling seems to be accepted, but the majority of uses agreed on\nthe \"unparsable\" variant.\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "27bdc9ec1baf6681f666056412afe0cc94105435", "tree": "18cf6bf99cf62e7d90bc187e6b2ebd52fbb06184", "parents": [ "22274146c4661a49b07071c887f4316bf8762b00" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:11 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:46:24 2019 +0100" }, "message": "tests: remove some trailing whitespace\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "22274146c4661a49b07071c887f4316bf8762b00", "tree": "8b78b810ca348c10a7b28ff83fec6ea90a426106", "parents": [ "5bc44d60bb766d5a8f675d247847ede061deb2fb" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:10 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:46:23 2019 +0100" }, "message": "tests: fix some typos in marker lines\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "5bc44d60bb766d5a8f675d247847ede061deb2fb", "tree": "8d30389ba5b65f719e5dff372488a9eb5d9a7a6d", "parents": [ "49475e5d0edf585ef89dfa6b27a30dbff7f19b1b" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Aug 29 16:43:09 2019 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:46:22 2019 +0100" }, "message": "tests/toolbox: detect endianness with PIE executables\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "49475e5d0edf585ef89dfa6b27a30dbff7f19b1b", "tree": "a8fd4a5ef59c8d7d1b1ef4f95d16a48303ba7647", "parents": [ "7a3ee1510c2e21ce2f4508539e64a57174ed7333" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Aug 28 12:18:42 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:43:57 2019 +0100" }, "message": "test: Fold expect_keyid into create_key and suchlike\n\nFold the use of expect_keyid into create_key and suchlike to make it easier\nto integrate notification checks into the existing superstructure, thereby\nmaking them happen automatically rather than having to manually code them.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "7a3ee1510c2e21ce2f4508539e64a57174ed7333", "tree": "29c2a32f2ab8665f647483a0ebf2774904d3bfe5", "parents": [ "2bdef38877b11be9ddc31362518b37c8019120cd" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Sep 02 14:06:03 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:43:57 2019 +0100" }, "message": "rpm: Fix version determination for \"make rpm\"\n\nFix the determination of the version string for \"make rpm\" by making sure\nthat all otherwise unhandled %{...} variable substitutions get deleted.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "2bdef38877b11be9ddc31362518b37c8019120cd", "tree": "c868881181fc86273ef900eefc99135a78535700", "parents": [ "6acc20128b87512bb4e72fb899accb85c51ab15c" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Sep 02 13:46:12 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Sep 04 10:43:57 2019 +0100" }, "message": "Fix the guess for the default LIBDIR\n\nThe guesser for the default LIBDIR examines the libraries used by make,\nlooking for libc. Make uses libcrypt as well as libc, so if libcrypt\nhappens to come first, that matches and the sed command to extract the\nlibrary path fails.\n\nFix this by looking for a match on \"libc.\" instead of \"libc\".\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "6acc20128b87512bb4e72fb899accb85c51ab15c", "tree": "24df2f9785c0be33fc0eca4d037dfee9e7f4c1a9", "parents": [ "aecac18e070295656ae0965f09fcd31b8f6e1db7" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 16 15:17:32 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:43:09 2019 +0100" }, "message": "test: Test trusted keyring features\n\nTest kernel features like the builtin trusted keyring.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "aecac18e070295656ae0965f09fcd31b8f6e1db7", "tree": "1dfb71f40876337750a309e519bff4c13cf9b0ff", "parents": [ "af573e51f2abae3da702204c068043a11018e9a4" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 16 17:26:21 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:42:49 2019 +0100" }, "message": "test: Use hex-converting padd for dh_compute tests\n\nUse hex-converting padd to load data for dh_compute tests.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "af573e51f2abae3da702204c068043a11018e9a4", "tree": "8ea0280b4ab1af737e12de0bc406fa432375b202", "parents": [ "9a99f28afbabb48d2164ab7819b3fd981c978d46" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 16 16:04:52 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:42:10 2019 +0100" }, "message": "keyctl: Allow add, padd and suchlike to take hex-encoded data\n\nAllow add, padd, update, pupdate, instantiate, pinstantiate and\ndh_compute_kdf_oi to take hex-encoded data which is then converted into\nbinary before being passed to the kernel, e.g.:\n\n\t$ keyctl add -x user foo 686578 @s\n\t$ echo 686578 | keyctl padd -x user foo @s\n\nThis makes it easier to stash data in scripts.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "9a99f28afbabb48d2164ab7819b3fd981c978d46", "tree": "ba16cea4bf6081bb93dba02e445c74267d600f51", "parents": [ "877a60343810a46d4d2c3b66287211f12f1035d5" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 16 11:29:35 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:42:00 2019 +0100" }, "message": "test: Check that KEYCTL_SESSION_TO_PARENT works\n\nCheck that the KEYCTL_SESSION_TO_PARENT keyctl function works.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "877a60343810a46d4d2c3b66287211f12f1035d5", "tree": "309f4e18ae071747a0e0552703c7ba5c68fb1774", "parents": [ "93052ad750f2af1cc9b592005cfb95880dc44f4a" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 16 12:52:47 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:41:03 2019 +0100" }, "message": "Allow keyctl new_session to name the session keyring\n\nAllow \"keyctl new_session\" to name the session keyring it creates and\nattaches to the parent:\n\n\t$ keyctl new_session fred\n\t52095209\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "93052ad750f2af1cc9b592005cfb95880dc44f4a", "tree": "a8e429da991cfb485058287a369db80f29eca00f", "parents": [ "1274bc7020f934072f112d9a43a9db0265438a5f" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 16 12:24:52 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:40:48 2019 +0100" }, "message": "Add a symbolic ID to numeric ID keyctl command\n\nAdd a keyctl command to look up a symbolic key ID (such as \"@s\") or a named\nreference (such as \"%user:foo\") and return the numeric ID for the key or\nkeyring, eg:\n\n\t$ keyctl id @s\n\t259509209\n\nThe command will also just convert numeric IDs to themselves.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "1274bc7020f934072f112d9a43a9db0265438a5f", "tree": "fa1b7b662d47a3007f55030000705c519c7b0eda", "parents": [ "7f7e18cc55b7b22e46e258e5f694aba61a9f7c47" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 16 12:58:09 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:40:36 2019 +0100" }, "message": "Put the keyctl get_persistent command in the right order\n\nPut the keyctl get_persistent command in the right place in the alphabetic\ncommand order.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "7f7e18cc55b7b22e46e258e5f694aba61a9f7c47", "tree": "4a247ddd392868a023ee909bbd73758c4f3824bb", "parents": [ "b9b87fdecb79022471271df8d722b7f4e6c0a6c5" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 16 11:19:27 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:40:02 2019 +0100" }, "message": "Allow retrieval of raw data with \"keyctl supports\"\n\nAllow \"keyctl supports\" to be given a \"--raw\" flag to request a hexdump of\nthe data retrieved.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "b9b87fdecb79022471271df8d722b7f4e6c0a6c5", "tree": "8b28dba23bc2215bcaa4fbcae2e204476d6532d8", "parents": [ "066bf56807c26cd3045a25f355b34c1d8a20a5aa" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Aug 15 16:08:26 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:39:29 2019 +0100" }, "message": "Add namespace-related capability tags\n\nAdd missing ns_keyring_name and ns_key_tag capability tags to \"keyctl\nsupports\".\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "066bf56807c26cd3045a25f355b34c1d8a20a5aa", "tree": "86959378e0e08ce4d2ccd6bb8d85a2680475cfa8", "parents": [ "dc12d37cb28388f722644e5484a34eadc5976e4b" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 11:34:03 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Aug 19 15:38:14 2019 +0100" }, "message": "test: Test all possible type, description and payload lengths to add_key\n\nTest all possible type, description and payload lengths to add_key() to\nmake sure that the kernel doesn\u0027t crash when handling them.\n\nThe bulk of this test is implemented in C in the keyctl command so that it\ncompletes in a reasonable amount of time (testing over a million different\nsizes of payload from shell script is just too slow).\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "dc12d37cb28388f722644e5484a34eadc5976e4b", "tree": "db284d87c3eac170a4b7bbe23dd6019cd1efec0e", "parents": [ "ad921197cad8ed4f8eb39d7dddeae30f7b917538" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 02 16:09:24 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Aug 02 16:09:24 2019 +0100" }, "message": "Move to version 1.6.1\n" }, { "commit": "ad921197cad8ed4f8eb39d7dddeae30f7b917538", "tree": "54cf85a45ed2af38f38e332f3ffc2daadcc3f7c2", "parents": [ "f9761a6a9abec83c7fd7a9cbc96237f7cd344808" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu May 30 16:58:35 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Jun 19 14:10:37 2019 +0100" }, "message": "test: Use capabilities query function in test scripts\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "f9761a6a9abec83c7fd7a9cbc96237f7cd344808", "tree": "d861c399235c4ebb6934c82aac884b84bbccf4b5", "parents": [ "0f70f77491bb6976a2bf761224fec1a9cc6cfb87" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu May 30 15:23:02 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Jun 19 13:42:09 2019 +0100" }, "message": "Provide the ability to query subsystem capabilities\n\nProvide the ability to query the capabilities of the keyrings subsystem.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "0f70f77491bb6976a2bf761224fec1a9cc6cfb87", "tree": "f617713714470fdae7de2fe33208f88546b4795e", "parents": [ "7afeb339062d42e5bae49e68c870971a2672333f" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed May 29 23:37:15 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Jun 19 13:42:05 2019 +0100" }, "message": "Add support for KEYCTL_MOVE\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "7afeb339062d42e5bae49e68c870971a2672333f", "tree": "ecae388c02b22bf55caacd6b61b1eee649f3bc3e", "parents": [ "7f4d9434de9a3d47a9e5259a31279a90c1b21451" ], "author": { "name": "Lennert Buytenhek", "email": "buytenh@wantstofly.org", "time": "Thu Jun 13 18:46:39 2019 +0300" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Jun 19 13:42:05 2019 +0100" }, "message": "Make key\u003dvalue argument list optional for pkey_{encrypt,decrypt,sign}\n\nkeyctl\u0027s help message suggests that including a key\u003dvalue style list\nof arguments is optional for the pkey_* operations, and for pkey_query\nand pkey_verify it indeed seems to be optional, but the other three\noperations require that at least one key\u003dvalue pair be passed in.\n\nThis patch changes the logic to make key\u003dvalue lists optional for\nall pkey_* operations.\n\nSigned-off-by: Lennert Buytenhek \u003cbuytenh@wantstofly.org\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "7f4d9434de9a3d47a9e5259a31279a90c1b21451", "tree": "9ccc5fb278eaf608f46d5fc93d1d39cb0080a027", "parents": [ "b515fa46caf8fc5edd782991deeb488560026ca1" ], "author": { "name": "Lennert Buytenhek", "email": "buytenh@wantstofly.org", "time": "Thu Jun 13 18:46:08 2019 +0300" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Jun 19 13:42:05 2019 +0100" }, "message": "Fix syscall signature for KEYCTL_PKEY_QUERY\n\nCurrently, running \u0027keyctl pkey_query\u0027 (or pkey_{encrypt,decrypt,sign},\ndue to those using pkey_query internally) will always return:\n\n\tkeyctl_pkey_query: Invalid argument\n\nThis is because we invoke KEYCTL_PKEY_QUERY as:\n\n\treturn keyctl(KEYCTL_PKEY_QUERY, key_id, info, result);\n\nWhile the kernel code (security/keys/keyctl.c) does this:\n\n\t[...]\n\tcase KEYCTL_PKEY_QUERY:\n\t\tif (arg3 !\u003d 0)\n\t\t\treturn -EINVAL;\n\t\treturn keyctl_pkey_query((key_serial_t)arg2,\n\t\t\t\t\t (const char __user *)arg4,\n\t\t\t\t\t (struct keyctl_pkey_query __user *)arg5);\n\t[...]\n\nIn other words, there is supposed to be an argument between \u0027key_id\u0027\nand \u0027info\u0027 (presumably for the (currently unsupported) key password\nfield?) which is supposed to be NULL. Adding a NULL argument seems to\nmake things happy.\n\nSigned-off-by: Lennert Buytenhek \u003cbuytenh@wantstofly.org\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "b515fa46caf8fc5edd782991deeb488560026ca1", "tree": "2802d515addb219334e88d804ff2f88cb4726327", "parents": [ "6feef507d01880d70d01f1b1415ae42c0be51687" ], "author": { "name": "Lennert Buytenhek", "email": "buytenh@wantstofly.org", "time": "Thu Jun 13 18:45:49 2019 +0300" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Jun 19 13:42:05 2019 +0100" }, "message": "Fix \u0027keyctl pkey_query\u0027 argument parsing\n\nkeyctl\u0027s pkey_* operations each have an argument that allows specifying\na key password, but since that feature isn\u0027t currently supported, it\nis supposed to always be passed in as \"0\":\n\n\tif (strcmp(argv[2], \"0\") !\u003d 0) {\n\t\tfprintf(stderr, \"Password passing is not yet supported\\n\");\n\t\texit(2);\n\t}\n\nHowever, act_keyctl_pkey_query() has an off-by-one that makes it\nstart parsing key\u003dvalue style option pairs at the password argument,\nwhich causes the following error if the password argument is not in\nkey\u003dvalue format:\n\n\t$ keyctl pkey_query 541826697 0\n\tOption not in key\u003dval form\n\t$\n\nAnd this error if the password argument is in key\u003dvalue format:\n\n\t$ keyctl pkey_query 541826697 a\u003db\n\tPassword passing is not yet supported\n\t$\n\nThis patch fixes act_keyctl_pkey_query() to start parsing key\u003dvalue\npairs from the right place in its argument list, which gets it a\nlittle further.\n\nSigned-off-by: Lennert Buytenhek \u003cbuytenh@wantstofly.org\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "6feef507d01880d70d01f1b1415ae42c0be51687", "tree": "bd0ce17a2d56051e1c781b064c2c0fb2cfdbe976", "parents": [ "2d384413d290b90146e8f30d7b006758b87ad4d8" ], "author": { "name": "Dominik Brodowski", "email": "linux@dominikbrodowski.net", "time": "Thu Mar 07 08:42:45 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri May 03 08:07:56 2019 +0100" }, "message": "man: keyctl_pkey_verify(3) should point to keyctl_pkey_sign(3)\n\nThis fixes man(1) and mandb(8) complaining that keyctl_pkey_verify.3.gz\nis self referencing.\n\nSigned-off-by: Dominik Brodowski \u003clinux@dominikbrodowski.net\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "2d384413d290b90146e8f30d7b006758b87ad4d8", "tree": "df1931b797528c220d755495cf83c993d30d0922", "parents": [ "d66ce0b94ba40b8d5db88c7bc218a1948ec06fd9" ], "author": { "name": "Dominik Brodowski", "email": "linux@dominikbrodowski.net", "time": "Thu Mar 07 08:42:42 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri May 03 08:07:43 2019 +0100" }, "message": "man: do not include keyctl_pkey_sign(3) in its own \u0027see also\u0027 section\n\nThis fixes an endless manual recursion in the \"see also\" section\nof keyctl_pkey_sign(3).\n\nSigned-off-by: Dominik Brodowski \u003clinux@dominikbrodowski.net\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "d66ce0b94ba40b8d5db88c7bc218a1948ec06fd9", "tree": "5062f2049feb125d322961e587675689699f5005", "parents": [ "0b1654506039e614954e141aad3ceddb7018a2cb" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Apr 26 15:46:00 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Apr 26 15:46:00 2019 +0100" }, "message": "TEST: Add requirement\n\nThe testsuite now requires lsb_release, so we need to make sure we require\nthe package that supplies it when inside the RH test farm.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "0b1654506039e614954e141aad3ceddb7018a2cb", "tree": "44ab5eed55f4e7b5c5548519ca7a1fb199fcb698", "parents": [ "bb7b8d2d198e3755c64ce571e8c836d155c46a02" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Apr 17 15:42:30 2019 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Apr 17 15:42:30 2019 +0100" }, "message": "TEST: Apply test exclusions for RHEL-8\n\nRHEL-8 doesn\u0027t enable the DH/KDF code, so disable the tests on all RHEL\ndistributions for now.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "bb7b8d2d198e3755c64ce571e8c836d155c46a02", "tree": "8c1d4b70dfd7820ef72988a259c89b0bd55bd079", "parents": [ "34ce58d90d49049eabe32c34e5ea28b924175168" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Mar 04 12:09:33 2019 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Mon Mar 04 12:09:33 2019 +0000" }, "message": "Handle %{?distprefix} in rpm build\n\nHandle %{?distprefix} cropping up in the release string used to generate\nthe src.rpm name.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "34ce58d90d49049eabe32c34e5ea28b924175168", "tree": "feb319983df51d8fb73d02f348aefedb208c5c21", "parents": [ "bc7e65c93ef9178c214aad4e13216a16673319b5" ], "author": { "name": "Eric Biggers", "email": "ebiggers@google.com", "time": "Thu Jan 10 12:31:16 2019 -0800" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Jan 16 15:25:50 2019 +0000" }, "message": "keyctl: use keyctl_read_alloc() in dump_key_tree_aux()\n\ndump_key_tree_aux() (part of \u0027keyctl show\u0027) was racy: it allocated a\nbuffer for the keyring contents, then read the keyring. But it\u0027s\npossible that keys are added to the keyring concurrently. This is\nproblematic for two reasons. First, when keyctl_read() is passed a\nbuffer that is too small, it is unspecified whether it is filled or not.\nSecond, even if the buffer is filled, some keys (not necessarily even\nthe newest ones) would be omitted from the listing.\n\nSwitch to keyctl_read_alloc() which handles the \"buffer too small\" case\ncorrectly by retrying the read.\n\nSigned-off-by: Eric Biggers \u003cebiggers@google.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "bc7e65c93ef9178c214aad4e13216a16673319b5", "tree": "b0d73d1bd204b4acc3b152abef7ffa4f82fba2fc", "parents": [ "4723f0185d11b13df243ad3cd41fbddfed53b5b1" ], "author": { "name": "Eric Biggers", "email": "ebiggers@google.com", "time": "Thu Jan 10 12:30:19 2019 -0800" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Jan 16 15:19:20 2019 +0000" }, "message": "man: keyctl_read(3): fix documentation for short buffer case\n\nWhen keyctl_read() is passed a buffer that is too small, the behavior is\ninconsistent. Some key types will fill as much of the buffer as\npossible, while others won\u0027t copy anything. Moreover, the in-kernel\ndocumentation contradicted the man page on this point.\n\nUpdate the man page to say that this point is unspecified.\n\nSigned-off-by: Eric Biggers \u003cebiggers@google.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "4723f0185d11b13df243ad3cd41fbddfed53b5b1", "tree": "39c7976503894e3b528b3c670197db99945446cd", "parents": [ "d4d758a04616b77048114f7b025ac91b7403e9f7" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Nov 13 16:03:16 2018 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Nov 13 16:28:30 2018 +0000" }, "message": "Move to version 1.6\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "d4d758a04616b77048114f7b025ac91b7403e9f7", "tree": "7de0c961f7762602c6a3a4a1280f7d0264a3f56f", "parents": [ "12bc241e1132d6b36efd14b3bd0a838d0e3e7686" ], "author": { "name": "Dave Jiang", "email": "dave.jiang@intel.com", "time": "Mon Nov 12 10:07:35 2018 -0700" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Nov 13 14:49:34 2018 +0000" }, "message": "keyutils: Add pkg-config file for keyutils library\n\nThis is needed so that other projects can add a dependency on libkeyutils\nvia PKG_CHECK_MODULES([KEYUTILS], [libkeyutils]). This enabling makes\n\u0027make install\u0027 do the right thing, and of course individual distros will\nneed to add enabling to their associated packages (rpm, deb, etc.) so the\npackage manager installs do the right thing.\n\nSigned-off-by: Dave Jiang \u003cdave.jiang@intel.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "12bc241e1132d6b36efd14b3bd0a838d0e3e7686", "tree": "3c650b229933d944552d5f333f865bdec02f4689", "parents": [ "722c93ed66a23dde775ec2bd7928987a00c4b0d4" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Nov 06 21:31:19 2018 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Nov 08 21:10:23 2018 +0000" }, "message": "Add man pages for asymmetric key type and ops\n\nAdd manual pages for the asymmetric key type and its specialised keyctl\noperations.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "722c93ed66a23dde775ec2bd7928987a00c4b0d4", "tree": "8c710d12477003631d112a58ef12f342a1c4e733", "parents": [ "7194eeed229280e97d2402a8c2e06c9552fa612f" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 02 14:51:28 2018 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 02 15:09:11 2018 +0000" }, "message": "Add public key operations for encrypt, decrypt, sign and verify\n\nAdd encryption, decryption, signature creation and signature verification\npublic key operations. Example usage:\n\n\tj\u003d`openssl pkcs8 -in ~/pkcs7/firmwarekey2.priv -topk8 -nocrypt -outform DER | \\\n\t keyctl padd asymmetric foo @s`\n\techo -n abcdefghijklmnopqrst \u003e/tmp/data\n\tkeyctl pkey_encrypt $j 0 /tmp/data enc\u003dpkcs1 \u003e/tmp/enc\n\tkeyctl pkey_decrypt $j 0 /tmp/enc enc\u003dpkcs1 \u003e/tmp/dec\n\tcmp /tmp/data /tmp/dec\n\tkeyctl pkey_sign $j 0 /tmp/data enc\u003dpkcs1 hash\u003dsha1 \u003e/tmp/sig\n\tkeyctl pkey_verify $j 0 /tmp/data /tmp/sig enc\u003dpkcs1 hash\u003dsha1\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nAcked-and-tested-by: Denis Kenzior \u003cdenkenz@gmail.com\u003e\n" }, { "commit": "7194eeed229280e97d2402a8c2e06c9552fa612f", "tree": "4ee010a38113227ef36ae5bb243f6277062389b0", "parents": [ "167e366b8debb559f557309c3f7def2a997cb4d2" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Sep 27 09:14:36 2018 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 02 15:09:11 2018 +0000" }, "message": "typos: fix various typos\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "167e366b8debb559f557309c3f7def2a997cb4d2", "tree": "49e01fea6aca89d887e7bbded58fd92511fe8455", "parents": [ "7db3f0a6a99e913a9a708f866cd856e00e367a3e" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Sep 27 09:14:31 2018 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 02 14:51:10 2018 +0000" }, "message": "keyctl_dh_compute.3: mention /proc/crypto for hashnames\n\nThe kernel does not have a set of known hashnames available. Instead,\n/proc/crypto contains the information for the running system.\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "7db3f0a6a99e913a9a708f866cd856e00e367a3e", "tree": "14719396f550747f9cff113389a4b6e170a0c58d", "parents": [ "f9c7b4e4437ae9dae455b3e9760df397571c29d7" ], "author": { "name": "Ben Boeckel", "email": "mathstuf@gmail.com", "time": "Thu Sep 27 09:14:30 2018 -0400" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 02 14:51:10 2018 +0000" }, "message": "keyctl: fix error path message names\n\nSigned-off-by: Ben Boeckel \u003cmathstuf@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "f9c7b4e4437ae9dae455b3e9760df397571c29d7", "tree": "67add20b6ea99dab2fabf25f14815f7ca309e721", "parents": [ "e8234d788e3be1801e5eebe4096b1d9e839023a6" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Sep 13 14:30:12 2018 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri Nov 02 13:55:53 2018 +0000" }, "message": "Remove the dependency on MIT Kerberos\n\nRemove the dependency on MIT Kerberos as not everyone has it available.\n\nWith the \"use best match\" change to /sbin/request-key, the kafs-client\npackage can install a more specific handler for dns_resolver afsdb:*\nrequests in front of the default one.\n\nThis means that the dns resolver program only needs to look up DNS records\nand can ignore any static kafs configuration.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "e8234d788e3be1801e5eebe4096b1d9e839023a6", "tree": "e928532feb8a386eee12df36dd49728c6a86763f", "parents": [ "2dbc532fefd918af247a4d46418b90003d1f590a" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Sep 04 11:07:59 2018 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Sep 13 14:48:32 2018 +0100" }, "message": "request-key: Find best match rather than first match\n\nWhen an upcall happens currently, either a file by the name\n\"/etc/request-key.d/\u003ctype\u003e.conf\" is scanned or the default file\n\"/etc/request-key.conf\" is scanned and then the first match (including\nwildcards) is selected.\n\nChange this to read all the files in the conf directory and then read the\ndefault file. The best rule is then chosen and executed.\n\n\"Best\" is defined as the rule with the least number of characters that are\nskipped by matching a wildcard (e.g. string \"foo:bar\" matches pattern\n\"foo:*\" with the number of characters being skipped being 3).\n\nFurther, the operation, type, description and callout_info columns are\nmatched individually and in order, so that a skip of 1 in the operation\ncolumn, say, is less preferable than an exact match there and a skip of 2\nin the type column.\n\nFor example, take:\n\n\tcreate dns_resolver afsdb:*\t*\t/sbin/key.afsdb %k\n\tcreate dns_resolver afsdb:*\thello*\t/sbin/key.xxxx %k\n\nif both lines match, the second one will be picked, but, on the other hand,\nwith:\n\n\tcreate dns_resolver afsdb:*\t*\t/sbin/key.afsdb %k\n\tcreat* dns_resolver afsdb:*\thello*\t/sbin/key.xxxx %k\n\nthe first will be picked.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nTested-by: Dave Jiang \u003cdave.jiang@intel.com\u003e\n" }, { "commit": "2dbc532fefd918af247a4d46418b90003d1f590a", "tree": "b880c48ff1dc09cd1f5c068cf1be45788e74601c", "parents": [ "daa032d077ee2f003d32ae86e4d5753bb8076b03" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Sep 04 10:51:23 2018 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Sep 13 14:48:32 2018 +0100" }, "message": "request-key: Provide a command line option to suppress execution\n\nAllow \"-x\" to be passed on the command line to the request-key program to\nsuppress side effects and target execution. This makes it easier to debug\nthe program and its configuration by allowing it to be driven from the\ncommand line.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "daa032d077ee2f003d32ae86e4d5753bb8076b03", "tree": "ae187bd7f7ced625a7b4e32276123f86c2fc261c", "parents": [ "d0fedbf9257a0fed18030527fd094588df5873aa" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Aug 28 17:26:01 2018 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Aug 28 17:26:01 2018 +0100" }, "message": "spec: Port cleanups from Fedora\n\nPort cleanups from Fedora:\n\nIgor Gnatenko \u003cignatenkobrain@fedoraproject.org\u003e\n - Switching to %ldconfig_scriptlets\n - Fixing the licence directory specs\n - Removing unneeded %defattr specs\n - Escaping macros in changelogs\n - Remove buildroot definition and deletion\n\nPeter Robinson \u003cpbrobinson@gmail.com\u003e\n - Add explicit gcc requirement\n - Remove Group specs\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\ncc: Igor Gnatenko \u003cignatenkobrain@fedoraproject.org\u003e\ncc: Peter Robinson \u003cpbrobinson@gmail.com\u003e\n" }, { "commit": "d0fedbf9257a0fed18030527fd094588df5873aa", "tree": "5928780e9a0c114d1f3e86d6adb5672f982ebd5b", "parents": [ "b5a1510b53045ad81c365c960a6298c172faf3ce" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Aug 21 23:24:03 2018 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Aug 21 23:24:03 2018 +0100" }, "message": "TEST: Add a missing backslash\n\nAdd a missing backslash into a regular expression in the toolbox.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "b5a1510b53045ad81c365c960a6298c172faf3ce", "tree": "2324caccd3ff2c9acc0468dfdd525572474ec011", "parents": [ "0d71523ab58493e1b40e1c80d569ff8ebc5ea27d" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed May 09 20:14:37 2018 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Fri May 11 15:30:30 2018 +0100" }, "message": "Move to version 1.5.11\n" }, { "commit": "0d71523ab58493e1b40e1c80d569ff8ebc5ea27d", "tree": "14e03f61827cdfd188fb2db9843df31a11c541c2", "parents": [ "28e7e32a2768182a70086a2b34e5547c073e7999" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed May 09 10:37:03 2018 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed May 09 20:14:41 2018 +0100" }, "message": "DNS: Support AFS SRV records and cell db config files\n" }, { "commit": "28e7e32a2768182a70086a2b34e5547c073e7999", "tree": "ac79995c0c5ccacd79f5162310d17f3de644bd5e", "parents": [ "62f223825386402db9f92ff4c148b1ab2a65f1b8" ], "author": { "name": "Artem Savkov", "email": "asavkov@redhat.com", "time": "Tue Jun 27 11:54:19 2017 +0200" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Jun 27 13:06:39 2017 +0100" }, "message": "tests/bz1031154: skip if selinux is disabled\n\nWith selinux disabled the test currently fails trying to setenforce, it\nshould be skipped instead. Found while trying to run in a container\nwhere selinux always appears disabled.\n\nSigned-off-by: Artem Savkov \u003casavkov@redhat.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "62f223825386402db9f92ff4c148b1ab2a65f1b8", "tree": "5ea331417b6bb8da71a518c86d7fca168634c994", "parents": [ "badd34263aff2c53749774589310d232c31b8f4b" ], "author": { "name": "Mat Martineau", "email": "mathew.j.martineau@linux.intel.com", "time": "Wed Jun 07 10:31:35 2017 -0700" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Jun 08 13:32:16 2017 +0100" }, "message": "TEST: Add KDF leading zero test\n\nDiffie-Hellman results used as input to a KDF algorithm can have leading\nzero bytes, and the current kernel DH implementation truncates leading\nzero bytes. This test confirms that the KDF code correctly handles DH\nresults with leading zeros.\n\nSigned-off-by: Mat Martineau \u003cmathew.j.martineau@linux.intel.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "badd34263aff2c53749774589310d232c31b8f4b", "tree": "bd22eddf3360526669b2f3f0d7968416ad276114", "parents": [ "dd88d8815a83322007b9deb666d947d6c3c3be7b" ], "author": { "name": "Stephan Müller", "email": "smueller@chronox.de", "time": "Tue Apr 04 02:04:05 2017 +0200" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Jun 08 13:32:16 2017 +0100" }, "message": "Add the interface logic to support DH with KDF handling support.\n\nThe dh_compute code now allows the following options:\n\n- no KDF support / output of raw DH shared secret:\n dh_compute \u003cprivate\u003e \u003cprime\u003e \u003cbase\u003e\n\n- KDF support without \"other information\" string:\n dh_compute_kdf \u003cprivate\u003e \u003cprime\u003e \u003cbase\u003e \u003coutput length\u003e \u003chash_type\u003e\n\n- KDF support with \"other information string:\n dh_compute_kdf_oi \u003cprivate\u003e \u003cprime\u003e \u003cbase\u003e \u003coutput length\u003e \u003chash_type\u003e\n where the OI string is provided on STDIN.\n\nThe test to verify the code is based on a test vector used for the CAVS\ntesting of SP800-56A.\n\nSigned-off-by: Stephan Mueller \u003csmueller@chronox.de\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "dd88d8815a83322007b9deb666d947d6c3c3be7b", "tree": "47ef5bb40d9b349fa76f8e5a3c986520ddc6fc77", "parents": [ "a1f18a036bdddd57b76c6410d81704a5f6fd8e89" ], "author": { "name": "Mat Martineau", "email": "mathew.j.martineau@linux.intel.com", "time": "Thu Mar 30 16:50:41 2017 -0700" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Jun 08 13:32:15 2017 +0100" }, "message": "Doc: Update man pages for KEYCTL_RESTRICT_KEYRING\n\nCreated a new manual page for the new keyctl_restrict_keyring function and\nadded \u0027keyctl restrict_keyring\u0027 information for the keyctl command line\nutility.\n\nSigned-off-by: Mat Martineau \u003cmathew.j.martineau@linux.intel.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "a1f18a036bdddd57b76c6410d81704a5f6fd8e89", "tree": "62837fa075c824a1215010578f3ec269274d71ee", "parents": [ "a28ec81569084ad9254239af1f16aee35ef0d52b" ], "author": { "name": "Mat Martineau", "email": "mathew.j.martineau@linux.intel.com", "time": "Thu Mar 30 16:50:40 2017 -0700" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Thu Jun 08 13:32:13 2017 +0100" }, "message": "TEST: Add tests for restricted keyring configuration\n\nTest keyring restrict options using keyctl_restrict()\n\nSigned-off-by: Mat Martineau \u003cmathew.j.martineau@linux.intel.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "a28ec81569084ad9254239af1f16aee35ef0d52b", "tree": "fb34f85e41207142e3a221c151d40a491cdd57ae", "parents": [ "95699c4e544635b6c09f12fcfed58dacb14077a0" ], "author": { "name": "Mat Martineau", "email": "mathew.j.martineau@linux.intel.com", "time": "Thu Mar 30 16:50:39 2017 -0700" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Apr 04 08:52:12 2017 +0100" }, "message": "Add keyring restriction\n\nSigned-off-by: Mat Martineau \u003cmathew.j.martineau@linux.intel.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "95699c4e544635b6c09f12fcfed58dacb14077a0", "tree": "1ab07df80bbcb83ac92a4ac86aa91f21f53bf4eb", "parents": [ "bb7a63b141776ffb6e148fb644ab4d22e11bb745" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Apr 04 08:51:00 2017 +0100" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Tue Apr 04 08:51:00 2017 +0100" }, "message": "lib: Begin the 1.7 library API\n\nNew symbols go into the libkeyutils.so.1.7 API.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "bb7a63b141776ffb6e148fb644ab4d22e11bb745", "tree": "724fcc782350642ac095b2bfe49545312ea1e371", "parents": [ "9ac78a0ac90fe944f3c76fbb8a84b88796851d32" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 15 22:24:17 2017 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 15 22:26:20 2017 +0000" }, "message": "spec: Fix licence handling\n\nFix the handling of licence files in the specfile.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "9ac78a0ac90fe944f3c76fbb8a84b88796851d32", "tree": "d5c38a334ca0e2a164cf6793380cb93c5eeae5d2", "parents": [ "308119c61e94bcc4c710404b9f679e3bb8316713" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 15 22:26:06 2017 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 15 22:26:06 2017 +0000" }, "message": "spec: Pass global ldflags into build\n\nPass global ldflags into build so that hardening works.\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "308119c61e94bcc4c710404b9f679e3bb8316713", "tree": "10e0bfd5cce4ac24dfb355ff17166fc616b8921f", "parents": [ "2d2bb5c547d4be4a935282e43204fc319e2383ae" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 15 20:57:15 2017 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 15 20:57:15 2017 +0000" }, "message": "Move to version 1.5.10\n" }, { "commit": "2d2bb5c547d4be4a935282e43204fc319e2383ae", "tree": "9e35dd8b62ac7c38177b752e49ccaea700be1e20", "parents": [ "87ba4d8c641279cdcef1bd924168427de7cb34b0", "b5a0e3110072c5e92a825e7f1afd07db6e106c0c" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 15 17:23:29 2017 +0000" }, "committer": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Mar 15 17:23:29 2017 +0000" }, "message": "Merge branch \u0027man_page_layout_fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mtk/keyutils into next\n\n\"Here are some more man page layout fixes.\n\nThe biggest change is reformatting or keyctl(1) so that it\u0027s\nprettier and more readable.\"\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\n" }, { "commit": "b5a0e3110072c5e92a825e7f1afd07db6e106c0c", "tree": "9e35dd8b62ac7c38177b752e49ccaea700be1e20", "parents": [ "e77497db64f6d3c1fe622a65bf1e98409939b7a6" ], "author": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 10:20:33 2016 +0100" }, "committer": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 10:20:33 2016 +0100" }, "message": "man: various pages: Use real minus signs\n\nSigned-off-by: Michael Kerrisk \u003cmtk.manpages@gmail.com\u003e\n" }, { "commit": "e77497db64f6d3c1fe622a65bf1e98409939b7a6", "tree": "afec4661c8acd76450497f7dd6eba3e3192d69ca", "parents": [ "53bb09f3604125d3d3c8261a25c349a2c1fadf68" ], "author": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 09:57:49 2016 +0100" }, "committer": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 10:12:10 2016 +0100" }, "message": "man: keyutils(7): Fix layout glitch\n\nI introduced this problem with an earlier commit. Sorry!\n\nSigned-off-by: Michael Kerrisk \u003cmtk.manpages@gmail.com\u003e\n" }, { "commit": "53bb09f3604125d3d3c8261a25c349a2c1fadf68", "tree": "44e68e6ef6fc4390afa7fd3653c7c0405942ce0e", "parents": [ "827147bc05a21cf9feacb57db5066e42e4048778" ], "author": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 09:55:05 2016 +0100" }, "committer": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 10:12:05 2016 +0100" }, "message": "man: keyutils(7): Better layout\n\nSigned-off-by: Michael Kerrisk \u003cmtk.manpages@gmail.com\u003e\n" }, { "commit": "827147bc05a21cf9feacb57db5066e42e4048778", "tree": "05ade48ae08f88b3f7aae17b41fc9eebbcbc19d6", "parents": [ "81258f2a2b41cadf36a1b8e958b4882a854c0193" ], "author": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 09:54:24 2016 +0100" }, "committer": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 10:12:00 2016 +0100" }, "message": "man: keyutils(7): Use real minus signs\n\nSigned-off-by: Michael Kerrisk \u003cmtk.manpages@gmail.com\u003e\n" }, { "commit": "81258f2a2b41cadf36a1b8e958b4882a854c0193", "tree": "cf6046fe8e6dc56df6ad9d04a831c4316d8c3867", "parents": [ "5813cba94db1517f16bfee7a555354692c4a6d9c" ], "author": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 09:53:37 2016 +0100" }, "committer": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 10:11:50 2016 +0100" }, "message": "man: keyutils(7): typo fix\n\nSigned-off-by: Michael Kerrisk \u003cmtk.manpages@gmail.com\u003e\n" }, { "commit": "5813cba94db1517f16bfee7a555354692c4a6d9c", "tree": "539fa00a289adf5655f21474ac04e032d263b1b4", "parents": [ "636ac0a2f9f167aad5fb597b21ec60c5f6e1d69c" ], "author": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 09:49:22 2016 +0100" }, "committer": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 10:11:44 2016 +0100" }, "message": "man: keyctl(1): SEE ALSO: add a few missing entries\n\nSigned-off-by: Michael Kerrisk \u003cmtk.manpages@gmail.com\u003e\n" }, { "commit": "636ac0a2f9f167aad5fb597b21ec60c5f6e1d69c", "tree": "82d851e5513e8bed0aa11601d5866201ad7482ae", "parents": [ "8829f40bea663db333469de8bbba6c7297cc70aa" ], "author": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 09:47:20 2016 +0100" }, "committer": { "name": "Michael Kerrisk", "email": "mtk.manpages@gmail.com", "time": "Sat Dec 17 10:11:39 2016 +0100" }, "message": "man: keyctl(1) Use real minus signes\n\nUse real minus signs in places where they should be used\n(e..g, shell command and shell output).\n\nSigned-off-by: Michael Kerrisk \u003cmtk.manpages@gmail.com\u003e\n" } ], "next": "8829f40bea663db333469de8bbba6c7297cc70aa" }