Whamcloud - gitweb
LU-14677 sec: do not expose security.c to listxattr/getxattr
authorSebastien Buisson <sbuisson@ddn.com>
Mon, 28 Jun 2021 18:32:16 +0000 (20:32 +0200)
committerAndreas Dilger <adilger@whamcloud.com>
Fri, 10 Sep 2021 21:31:45 +0000 (21:31 +0000)
commitf9b68814da6735425ba5bca2288688ac2d2387d1
treeefaa068fd6bbb9d6429efdd030ee66359424d887
parentb5b671df178f9c8b9c0ae4e6279f20049463a6be
LU-14677 sec: do not expose security.c to listxattr/getxattr

security.c xattr, which contains encryption context, should not be
exposed by the xattr-related system calls such as listxattr() and
getxattr() because of its special semantics.
Update sanity-sec test_57 to test this.

Lustre-change: https://review.whamcloud.com/44101
Lustre-commit: TBD (db49ec2ae2c96a09fae054e5fcb3d1959e26f83d)

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I919f5cbafc53f5745fbfb5b9d2d7316e892d8c9f
Reviewed-on: https://review.whamcloud.com/44183
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
lustre/llite/crypto.c
lustre/llite/llite_internal.h
lustre/llite/xattr.c
lustre/tests/sanity-sec.sh