Apply the PG_sensitive flag to the AF_KEY implementation

Index: linux-2.6/net/key/af_key.c
===================================================================
@@ -480,7 +480,7 @@ static inline struct xfrm_user_sec_ctx *
 	struct xfrm_user_sec_ctx *uctx = NULL;
 	int ctx_size = sec_ctx->sadb_x_ctx_len;
 
-	uctx = kmalloc((sizeof(*uctx)+ctx_size), GFP_KERNEL);
+	uctx = kmalloc((sizeof(*uctx)+ctx_size), GFP_KERNEL | GFP_SENSITIVE);
 
 	if (!uctx)
 		return NULL;

@@ -1184,7 +1184,7 @@ static struct xfrm_state * pfkey_msg2xfr
 		}
 		if (key)
 			keysize = (key->sadb_key_bits + 7) / 8;
-		x->aalg = kmalloc(sizeof(*x->aalg) + keysize, GFP_KERNEL);
+		x->aalg = kmalloc(sizeof(*x->aalg) + keysize, GFP_KERNEL | GFP_SENSITIVE);
 		if (!x->aalg)
 			goto out;
 		strcpy(x->aalg->alg_name, a->name);

@@ -1203,7 +1203,7 @@ static struct xfrm_state * pfkey_msg2xfr
 				err = -ENOSYS;
 				goto out;
 			}
-			x->calg = kmalloc(sizeof(*x->calg), GFP_KERNEL);
+			x->calg = kmalloc(sizeof(*x->calg), GFP_KERNEL | GFP_SENSITIVE);
 			if (!x->calg)
 				goto out;
 			strcpy(x->calg->alg_name, a->name);

@@ -1218,7 +1218,7 @@ static struct xfrm_state * pfkey_msg2xfr
 			key = (struct sadb_key*) ext_hdrs[SADB_EXT_KEY_ENCRYPT-1];
 			if (key)
 				keysize = (key->sadb_key_bits + 7) / 8;
-			x->ealg = kmalloc(sizeof(*x->ealg) + keysize, GFP_KERNEL);
+			x->ealg = kmalloc(sizeof(*x->ealg) + keysize, GFP_KERNEL | GFP_SENSITIVE);
 			if (!x->ealg)
 				goto out;
 			strcpy(x->ealg->alg_name, a->name);

@@ -1267,7 +1267,7 @@ static struct xfrm_state * pfkey_msg2xfr
 		struct sadb_x_nat_t_type* n_type;
 		struct xfrm_encap_tmpl *natt;
 
-		x->encap = kmalloc(sizeof(*x->encap), GFP_KERNEL);
+		x->encap = kmalloc(sizeof(*x->encap), GFP_KERNEL | GFP_SENSITIVE);
 		if (!x->encap)
 			goto out;