Re: [PATCH 1/3] crypto: af_alg - Make cbc(paes) privileged-only

[Richard Weinberger]

----- Ursprüngliche Mail -----
> Von: "Eric Biggers" <ebiggers@xxxxxxxxxx>
> An: "Linux Crypto Mailing List" <linux-crypto@xxxxxxxxxxxxxxx>, "Herbert Xu" <herbert@xxxxxxxxxxxxxxxxxxx>
> CC: "richard" <richard@xxxxxx>, "linux-kernel" <linux-kernel@xxxxxxxxxxxxxxx>, "Eric Biggers" <ebiggers@xxxxxxxxxx>
> Gesendet: Montag, 3. August 2026 01:00:53
> Betreff: [PATCH 1/3] crypto: af_alg - Make cbc(paes) privileged-only

> So far the only reported use cases for cbc(paes) have involved processes
> running as root.  Therefore, make af_alg_restrict=1 allow only
> privileged use of this algorithm for now.
> 
> Fixes: 947d62c09436 ("Merge
> git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6")
> Signed-off-by: Eric Biggers <ebiggers@xxxxxxxxxx>

Good catch, my intention was making it privileged only. :-S

Reviewed-by: Richard Weinberger <richard@xxxxxx>

Thanks,
//richard