Whamcloud - gitweb
LU-15922 sec: new connect flag for name encryption 74/47574/5
authorSebastien Buisson <sbuisson@ddn.com>
Thu, 9 Jun 2022 08:00:52 +0000 (10:00 +0200)
committerOleg Drokin <green@whamcloud.com>
Mon, 11 Jul 2022 22:14:02 +0000 (22:14 +0000)
commit71d63602c57e6d0cb723ae02ea767c6c170e5997
tree118d3c6fbebc5d4ab49cca6d8a31b534d7561bad
parent4a2498d22f46bfc52170baec6db4ce67671ac103
LU-15922 sec: new connect flag for name encryption

Introduce OBD_CONNECT2_ENCRYPT_NAME connection flag for compatibility
with older versions that do not support name encryption.
When server side does not have this flag, client side is forced to
null encryption for file names. And client needs to use old xattr to
store encryption context.

Also update tests in sanity-sec to exercise name encryption only if
server side supports it.

Fixes: ed4a625d88 ("LU-13717 sec: filename encryption - digest support")
Test-Parameters: serverversion=2.14 testlist=sanity-sec mdscount=2 mdtcount=4 osscount=1 ostcount=8 clientcount=2 fstype=ldiskfs
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I446a4caba8e45821d701628a14c96f03cb6c4525
Reviewed-on: https://review.whamcloud.com/47574
Tested-by: jenkins <devops@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Lai Siyao <lai.siyao@whamcloud.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
17 files changed:
libcfs/include/libcfs/crypto/llcrypt.h
libcfs/libcfs/crypto/keysetup.c
lustre/include/lustre_crypto.h
lustre/include/uapi/linux/lustre/lustre_idl.h
lustre/llite/crypto.c
lustre/llite/llite_internal.h
lustre/llite/llite_lib.c
lustre/llite/lproc_llite.c
lustre/llite/namei.c
lustre/llite/statahead.c
lustre/llite/super25.c
lustre/llite/xattr_cache.c
lustre/obdclass/lprocfs_status.c
lustre/ptlrpc/wiretest.c
lustre/tests/sanity-sec.sh
lustre/utils/wirecheck.c
lustre/utils/wiretest.c