Whamcloud - gitweb
EX-5199 sec: reinstate null encryption for file names
authorSebastien Buisson <sbuisson@ddn.com>
Mon, 2 May 2022 16:00:37 +0000 (18:00 +0200)
committerAndreas Dilger <adilger@whamcloud.com>
Fri, 6 May 2022 06:59:27 +0000 (06:59 +0000)
commit595b5bba8cef8adc70ddb1584e006a69a707be70
treefeea0461c851789dd1d3888337aeeff0a02bf700
parent55d2ef39621a035d5d7923cb9492483173d7f6f9
EX-5199 sec: reinstate null encryption for file names

Reinstate null encryption for file names by adding a new llite
parameter named 'enable_filename_encryption', set to 0 by default.
When this parameter is 0, new empty directories configured as
encrypted ignore the filenames_encryption_mode and use
LLCRYPT_MODE_NULL instead, which is a no-op. This LLCRYPT_MODE_NULL
mode is inherited for all subdirectories and files.
When this parameter is 1, new empty directories configured as
encrypted use the normal encryption mode.

To set this parameter globally for all clients, do on the MGS:
mgs# lctl set_param -P llite.*.enable_filename_encryption=0

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I9d726ba26cc91a51690d59a81efe3eb98ee2995c
Reviewed-on: https://review.whamcloud.com/47184
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
libcfs/include/libcfs/crypto/llcrypt.h
libcfs/libcfs/crypto/fname.c
libcfs/libcfs/crypto/hooks.c
libcfs/libcfs/crypto/policy.c
lustre/include/lustre_disk.h
lustre/llite/crypto.c
lustre/llite/file.c
lustre/llite/lproc_llite.c
lustre/obdclass/obd_mount.c