Whamcloud - gitweb
LU-14677 sec: no encryption key migrate/extend/resync/split
authorSebastien Buisson <sbuisson@ddn.com>
Thu, 17 Jun 2021 13:31:44 +0000 (15:31 +0200)
committerAndreas Dilger <adilger@whamcloud.com>
Mon, 21 Mar 2022 18:29:31 +0000 (18:29 +0000)
commit4869c7a53026532f9e086df9438da844bc2199f8
tree72f0adca1b874d556a9391f6bcf5e30e2a21b3be
parentf3fb6bdeb8f4961e184d5ede168bb7540211e346
LU-14677 sec: no encryption key migrate/extend/resync/split

Allow some layout operations on encrypted files, even when the
encryption key is not available:
- lfs migrate
- lfs mirror extend
- lfs mirror resync
- lfs mirror verify
- lfs mirror split
We allow these access patterns to applications that know what they are
doing, by using the specific flag O_FILE_ENC and O_DIRECT.

Also add sanity-sec test_59a,b,c to exercise these access patterns.

Lustre-change: https://review.whamcloud.com/44024
Lustre-commit: fdbf2ffd41fa5660782d5ca8489ec2eb644c8113

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: Ieaeee0e5bf7643f18d775fe6daa5e31c2f349f8c
Reviewed-on: https://review.whamcloud.com/44182
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
16 files changed:
lustre/doc/lfs-migrate.1
lustre/doc/lfs-mirror-split.1
lustre/include/lustre/lustreapi.h
lustre/include/obd.h
lustre/include/uapi/linux/lustre/lustre_user.h
lustre/llite/crypto.c
lustre/llite/dir.c
lustre/llite/file.c
lustre/llite/llite_internal.h
lustre/llite/llite_lib.c
lustre/llite/namei.c
lustre/osc/osc_request.c
lustre/tests/sanity-sec.sh
lustre/utils/lfs.c
lustre/utils/liblustreapi_layout.c
lustre/utils/lustreapi_internal.h