[SRU][B][C][D][Patch 0/1] pkey: Indicate old mkvp only if old and current mkvp are different (LP: 1832625)
frank.heimes at canonical.com
frank.heimes at canonical.com
Tue Jun 18 07:03:06 UTC 2019
Buglink: https://bugs.launchpad.net/bugs/1832625
SRU Justification:
[Impact]
* 'zkey validate' shows wrong information about master key registers
* this might lead to unsuccessful usage of pkeys, although the master key and the derived keys are correct
[Fix]
* ebb7c695d3bc7a4986b92edc8d9ef43491be183e ebb7c69 "pkey: Indicate old mkvp only if old and current mkvp are different"
[Test Case]
* set a CCA master key
* generate a pkey
* 'change' (or better set) the current CCA master key to the exact same master key again which is currently in use
* execute a 'zkey validate'
[Regression Potential]
* The regression potential can be considered as very low since this is purely s390x specific
* changes are limited to a single file (drivers/s390/crypto/pkey_api.c)
* patch changes only one line (actually expands an if stmt)
* and all this happens only in a very specific situation (in case a new master key was set, using the same key as before)
[Other Info]
* Problem was found during tests at IBM and is a so called 'preventive fix'
Ingo Franzki (1):
From: Ingo Franzki <ifranzki at linux.ibm.com>
drivers/s390/crypto/pkey_api.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--
2.7.4
More information about the kernel-team
mailing list