Re: [PATCH 1/3] crypto: af_alg - Make cbc(paes) privileged-only

Richard Weinberger <[email protected]> Tue, 4 Aug 2026 08:39:03 +0200 (CEST)
Newsgroups org.kernel.vger.linux-crypto,org.kernel.vger.linux-kernel
Message-ID <[email protected]>
----- Urspr=C3=BCngliche Mail -----
> Von: "Eric Biggers" <[email protected]>
> An: "Linux Crypto Mailing List" <[email protected]>, "Herbert =
Xu" <[email protected]>
> CC: "richard" <[email protected]>, "linux-kernel" <[email protected].=
org>, "Eric Biggers" <[email protected]>
> Gesendet: Montag, 3. August 2026 01:00:53
> Betreff: [PATCH 1/3] crypto: af_alg - Make cbc(paes) privileged-only

> So far the only reported use cases for cbc(paes) have involved processes
> running as root.  Therefore, make af_alg_restrict=3D1 allow only
> privileged use of this algorithm for now.
>=20
> Fixes: 947d62c09436 ("Merge
> git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6")
> Signed-off-by: Eric Biggers <[email protected]>

Good catch, my intention was making it privileged only. :-S

Reviewed-by: Richard Weinberger <[email protected]>

Thanks,
//richard