Re: [PATCH 1/3] crypto: af_alg - Make cbc(paes) privileged-only
Richard Weinberger <[email protected]> Tue, 4 Aug 2026 08:39:03 +0200 (CEST)
| Newsgroups | org.kernel.vger.linux-crypto,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
----- Urspr=C3=BCngliche Mail ----- > Von: "Eric Biggers" <[email protected]> > An: "Linux Crypto Mailing List" <[email protected]>, "Herbert = Xu" <[email protected]> > CC: "richard" <[email protected]>, "linux-kernel" <[email protected].= org>, "Eric Biggers" <[email protected]> > Gesendet: Montag, 3. August 2026 01:00:53 > Betreff: [PATCH 1/3] crypto: af_alg - Make cbc(paes) privileged-only > So far the only reported use cases for cbc(paes) have involved processes > running as root. Therefore, make af_alg_restrict=3D1 allow only > privileged use of this algorithm for now. >=20 > Fixes: 947d62c09436 ("Merge > git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6") > Signed-off-by: Eric Biggers <[email protected]> Good catch, my intention was making it privileged only. :-S Reviewed-by: Richard Weinberger <[email protected]> Thanks, //richard