Whamcloud - gitweb
LU-14677 sec: no encryption key migrate/extend/resync/split 24/44024/24
authorSebastien Buisson <sbuisson@ddn.com>
Thu, 17 Jun 2021 13:31:44 +0000 (15:31 +0200)
committerOleg Drokin <green@whamcloud.com>
Thu, 23 Dec 2021 07:17:58 +0000 (07:17 +0000)
commitfdbf2ffd41fa5660782d5ca8489ec2eb644c8113
treedb1ea800d8104f038a271843f4f2be8ca75a5ed8
parentb0f150eba4c2ced44c3a41bcb7cfc7517f7b31f1
LU-14677 sec: no encryption key migrate/extend/resync/split

Allow some layout operations on encrypted files, even when the
encryption key is not available:
- lfs migrate
- lfs mirror extend
- lfs mirror resync
- lfs mirror verify
- lfs mirror split
We allow these access patterns to applications that know what they are
doing, by using the specific flag O_FILE_ENC and O_DIRECT.

Also add sanity-sec test_59a,b,c to exercise these access patterns.

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: Ieaeee0e5bf7643f18d775fe6daa5e31c2f349f8c
Reviewed-on: https://review.whamcloud.com/44024
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Patrick Farrell <pfarrell@whamcloud.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
16 files changed:
lustre/doc/lfs-migrate.1
lustre/doc/lfs-mirror-split.1
lustre/include/lustre/lustreapi.h
lustre/include/obd.h
lustre/include/uapi/linux/lustre/lustre_user.h
lustre/llite/crypto.c
lustre/llite/dir.c
lustre/llite/file.c
lustre/llite/llite_internal.h
lustre/llite/llite_lib.c
lustre/llite/namei.c
lustre/osc/osc_request.c
lustre/tests/sanity-sec.sh
lustre/utils/lfs.c
lustre/utils/liblustreapi_layout.c
lustre/utils/lustreapi_internal.h