Re: [PATCH 0/3] crypto: af_alg_restrict cleanups

From: Herbert Xu

Date: Mon Aug 10 2026 - 04:42:39 EST


On Sun, Aug 02, 2026 at 04:00:52PM -0700, Eric Biggers wrote:
> - Make cbc(paes) privileged-only for now, as previously discussed
> - Make it more explicit when unprivileged use is allowed
> - Avoid some redundant work during allowlist checking
>
> Eric Biggers (3):
> crypto: af_alg - Make cbc(paes) privileged-only
> crypto: af_alg - Replace 'bool privileged' with flags
> crypto: af_alg - Stop after finding name in allowlist
>
> crypto/af_alg.c | 10 +++++++---
> crypto/algif_aead.c | 2 +-
> crypto/algif_hash.c | 28 ++++++++++++++--------------
> crypto/algif_skcipher.c | 28 ++++++++++++++--------------
> include/crypto/if_alg.h | 6 +++++-
> 5 files changed, 41 insertions(+), 33 deletions(-)
>
>
> base-commit: 947d62c094367ef6064907d570b47612cd579df6
> --
> 2.55.0

All applied. Thanks.
--
Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt