Whamcloud - gitweb
LU-15922 sec: new connect flag for name encryption 74/47574/3
authorSebastien Buisson <sbuisson@ddn.com>
Thu, 9 Jun 2022 08:00:52 +0000 (10:00 +0200)
committerSebastien Buisson <sbuisson@ddn.com>
Fri, 10 Jun 2022 13:37:28 +0000 (15:37 +0200)
commitec94d5cb80bd14d90920f9295cd0dadf5cf7d499
tree3bb656eb48b3d7c726275c170ba670726a88537d
parentb00ac5f7038434a339b235445c260f439a409b49
LU-15922 sec: new connect flag for name encryption

Introduce OBD_CONNECT2_ENCRYPT_NAME connection flag for compatibility
with older versions that do not support name encryption.
When server side does not have this flag, client side is forced to
null encryption for file names. And client needs to use old xattr to
store encryption context.

Also update tests in sanity-sec to exercise name encryption only if
server side supports it.

Fixes: ed4a625d88 ("LU-13717 sec: filename encryption - digest support")
Test-Parameters: serverversion=2.14 testlist=sanity-sec mdscount=2 mdtcount=4 osscount=1 ostcount=8 clientcount=2 fstype=ldiskfs
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I446a4caba8e45821d701628a14c96f03cb6c4525
17 files changed:
libcfs/include/libcfs/crypto/llcrypt.h
libcfs/libcfs/crypto/keysetup.c
lustre/include/lustre_crypto.h
lustre/include/uapi/linux/lustre/lustre_idl.h
lustre/llite/crypto.c
lustre/llite/llite_internal.h
lustre/llite/llite_lib.c
lustre/llite/lproc_llite.c
lustre/llite/namei.c
lustre/llite/statahead.c
lustre/llite/super25.c
lustre/llite/xattr_cache.c
lustre/obdclass/lprocfs_status.c
lustre/ptlrpc/wiretest.c
lustre/tests/sanity-sec.sh
lustre/utils/wirecheck.c
lustre/utils/wiretest.c