mirror of
git://git.gnupg.org/gnupg.git
synced 2025-07-03 22:56:33 +02:00
* export.c (do_export_stream) [ENABLE_SELINUX_HACKS]: Don't allow
secret key export. * import.c (import_secret_one) [ENABLE_SELINUX_HACKS]: Likewise
This commit is contained in:
parent
8f70a693ac
commit
f294ce2d8b
3 changed files with 23 additions and 0 deletions
|
@ -171,6 +171,14 @@ do_export_stream( IOBUF out, STRLIST users, int secret,
|
|||
do this we need an extra flag to enable this feature so */
|
||||
}
|
||||
|
||||
#ifdef ENABLE_SELINUX_HACKS
|
||||
if (secret) {
|
||||
log_error (_("exporting secret keys not allowed\n"));
|
||||
rc = G10ERR_GENERAL;
|
||||
goto leave;
|
||||
}
|
||||
#endif
|
||||
|
||||
while (!(rc = keydb_search2 (kdbhd, desc, ndesc, &descindex))) {
|
||||
int sha1_warned=0,skip_until_subkey=0;
|
||||
u32 sk_keyid[2];
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue