Whamcloud - gitweb
git://git.whamcloud.com
/
fs
/
lustre-release.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
LU-16846 nrs: Fix console messages
2023-07-08
Sebastien Buisson
LU-13343 gss: no sec flavor on loopback connection
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-06-20
Sebastien Buisson
LU-16888 gss: fix ptlrpc_gss automatic loading
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-06-09
Sebastien Buisson
LU-16799 tests: fix sanity-krb5
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-31
Sebastien Buisson
LU-16784 tests: fix path to lgss_sk
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-31
Sebastien Buisson
LU-16804 tests: load CONFIG at beginning of init_test_env
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-19
Sebastien Buisson
LU-16790 man: fix lctl-nodemap-modify man page
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-19
Sebastien Buisson
LU-16775 tests: cleanup target after sanity-sec test_31
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-09
Sebastien Buisson
LU-16758 krb: use Kerberos machine principal in client
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-18
Sebastien Buisson
LU-16708 tests: fix zconf_mount_clients for SSK
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-18
Sebastien Buisson
LU-16670 enc: make sure DoM files are correctly decrypted
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-11
Sebastien Buisson
LU-16646 krb: improve lookup of user's credentials
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-11
Sebastien Buisson
LU-16646 krb: use system ccache for Lustre services
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-11
Sebastien Buisson
LU-16646 krb: get rid of MEMORY private cache for krb...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-11
Sebastien Buisson
LU-16630 sec: improve Kerberos cross-realm trust remapping
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-04
Sebastien Buisson
LU-16676 build: always include llcrypt sources
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-03
Sebastien Buisson
LU-16683 tests: fix sanity-sec test_61 for SSK
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-28
Sebastien Buisson
LU-16642 tests: improve sanity-sec test_61
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-21
Sebastien Buisson
LU-16524 sec: add fscrypt_admin rbac role
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-21
Sebastien Buisson
LU-16524 sec: enforce rbac roles
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-21
Sebastien Buisson
LU-16524 nodemap: add rbac property to nodemap
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-21
Sebastien Buisson
LU-16374 ldiskfs: round-up enc file size
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-02-14
Sebastien Buisson
LU-16532 sec: session key bad keyring
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-02-14
Sebastien Buisson
LU-16494 fileset: check fileset for operations by fid
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-02-03
Sebastien Buisson
LU-16310 sec: Lustre/HSM on enc file with enc key
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-02-03
Sebastien Buisson
LU-16205 sec: fid2path for encrypted files
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-31
Sebastien Buisson
LU-16374 enc: align Base64 encoding with RFC 4648 base64url
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-27
Sebastien Buisson
LU-16445 sec: make nodemap root squash independent...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-19
Sebastien Buisson
LU-16369 ldiskfs: do not check enc context at lookup
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-19
Sebastien Buisson
LU-16444 enc: null-enc names cannot be digested form
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-13
Sebastien Buisson
LU-16165 sec: retry mechanism for identity cache
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-13
Sebastien Buisson
LU-16091 enc: S_ENCRYPTED flag on OST objects for enc...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-12-13
Sebastien Buisson
LU-16205 sec: reserve flag for fid2path for encrypted...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-11-02
Sebastien Buisson
LU-16249 sec: krb5_decrypt_bulk calls decryption primitive
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-10-15
Sebastien Buisson
LU-15451 sec: retry ro mount if read-only flag set
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-10-04
Sebastien Buisson
LU-16125 tests: make sanity-sec more robust with SSK
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-12
Sebastien Buisson
LU-15911 enc: null encrypted names is embedded llcrypt...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-06
Sebastien Buisson
LU-16085 tests: fix sanityn test_106c
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-01
Sebastien Buisson
LU-16085 llite: fix stat attributes_mask
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-01
Sebastien Buisson
LU-16012 sec: fix detection of SELinux enforcement
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-01
Sebastien Buisson
LU-16045 enc: force use of new enc xattr on new servers
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-01
Sebastien Buisson
LU-15003 sec: use enc pool for bounce pages
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-08-08
Sebastien Buisson
LU-15896 gss: support OpenSSLv3
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-07-11
Sebastien Buisson
LU-15922 sec: new connect flag for name encryption
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-07-11
Sebastien Buisson
LU-15451 sec: read-only nodemap flag
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-07-08
Sebastien Buisson
LU-15956 gss: allow build without ssk
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-27
Sebastien Buisson
LU-15855 enc: enc-unaware clients get ENOKEY if file...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-27
Sebastien Buisson
LU-15625 sec: fix set_param -P for root squash
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-18
Sebastien Buisson
LU-15896 gss: ignore OpenSSLv3 deprecated API
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-11
Sebastien Buisson
LU-15908 build: fix debian rules
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-11
Sebastien Buisson
LU-9243 gss: fix GSS struct definition badness
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-11
Sebastien Buisson
LU-15508 gss: protect from arbitrary write to init...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-27
Sebastien Buisson
LU-15858 sec: reinstate null encryption for file names
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-27
Sebastien Buisson
LU-15848 ldiskfs: escape encrypted file names
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-06
Sebastien Buisson
LU-15810 sec: fix enc dir migration
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-05
Sebastien Buisson
LU-15787 sec: document enc-unaware clients on enc files
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-05
Sebastien Buisson
LU-15803 sec: correctly handle page lock in ll_io_zero_page
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-05
Sebastien Buisson
LU-15787 sec: block enc unaware clients on enc files
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-03-21
Sebastien Buisson
LU-15661 nodemap: fix map mode value for 'both'
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-03-17
Sebastien Buisson
LU-15608 sec: fix DIO for encrypted files
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-01-31
Sebastien Buisson
LU-15176 sec: present .fscrypt in subdir mount
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-01-18
Sebastien Buisson
LU-15176 sec: allow subdir mount of encrypted dir
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-01-18
Sebastien Buisson
LU-13717 sec: make client encryption compatible with...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-01-18
Sebastien Buisson
LU-15407 test: remove dummy enc key at cleanup
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-01-18
Sebastien Buisson
LU-15406 sec: fix in-kernel fscrypt support
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-01-11
Sebastien Buisson
LU-15408 sec: confirm encrypted file's hash
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-12-23
Sebastien Buisson
LU-13717 sec: fix handling of encrypted file with long...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-12-23
Sebastien Buisson
LU-14677 sec: remove MIGRATION_ compatibility defines
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-12-23
Sebastien Buisson
LU-14677 sec: no encryption key migrate/extend/resync...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-11-30
Sebastien Buisson
LU-15184 llite: properly detect SELinux disabled case
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-11-20
Sebastien Buisson
LU-15141 quota: optimize capability check for root...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-11-03
Sebastien Buisson
LU-15098 tests: sanity-sec 27a exec commands on right...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-11-03
Sebastien Buisson
LU-13717 sec: missing defs in includes for client encryption
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-11-03
Sebastien Buisson
LU-14929 gss: detect libkeyutils dependency
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-11-03
Sebastien Buisson
LU-15047 gss: gss integrity check with multi-rail
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-10-27
Sebastien Buisson
LU-14937 build: re-use config cache in 'make rpms/debs'
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-10-17
Sebastien Buisson
LU-15064 tests: sanity-sec test_58 must read its own dir
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-10-17
Sebastien Buisson
LU-14989 sec: keep encryption context in xattr cache
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-10-10
Sebastien Buisson
LU-14797 nodemap: map project id
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-10-10
Sebastien Buisson
LU-14797 sec: add projid to nodemap
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-10-01
Sebastien Buisson
LU-14629 sec: do not block rename of topmost encrypted dir
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-10-01
Sebastien Buisson
LU-14989 sec: access to enc file's xattrs
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-09-29
Sebastien Buisson
LU-15027 sec: initialize ll_inode_info for fake inode
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-09-22
Sebastien Buisson
LU-14677 sec: do not expose security.c to listxattr...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-09-22
Sebastien Buisson
LU-14677 llite: move env contexts to ll_inode_info...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-09-22
Sebastien Buisson
LU-13717 sec: filename encryption - symlink support
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-09-17
Sebastien Buisson
LU-13717 sec: filename encryption - digest support
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-09-11
Sebastien Buisson
LU-13717 sec: filename encryption
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-07-27
Sebastien Buisson
LU-13717 sec: handle null algo for filename encryption
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-07-22
Sebastien Buisson
LU-14833 sec: quiet spurious gss_init_svc_upcall()...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-07-22
Sebastien Buisson
LU-14804 nodemap: do not return error for improper ACL
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-07-12
Sebastien Buisson
LU-14677 sec: migrate/extend/split on encrypted file
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-07-12
Sebastien Buisson
LU-14739 quota: nodemap squashed root cannot bypass...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-06-02
Sebastien Buisson
LU-13717 sec: limit hard links to linkEA size for enc...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-06-02
Sebastien Buisson
LU-14629 sec: forbid file rename from enc to unencrypted dir
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-05-27
Sebastien Buisson
LU-14673 sec: annotate algorithms taking optional key
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-05-06
Sebastien Buisson
LU-14669 tests: reduce time spent in sanity-sec
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-05-05
Sebastien Buisson
LU-13717 sec: rework includes for client encryption
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-04-06
Sebastien Buisson
LU-14538 gss: make namespace optional in lgss_keyring
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-03-30
Sebastien Buisson
LU-14534 gss: do not refresh context for LDLM callback
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2021-03-30
Sebastien Buisson
LU-14204 tests: use first available import
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
next