Whamcloud - gitweb
LU-14677 sec: do not expose security.c to listxattr/getxattr 01/44101/14
authorSebastien Buisson <sbuisson@ddn.com>
Mon, 28 Jun 2021 18:32:16 +0000 (20:32 +0200)
committerOleg Drokin <green@whamcloud.com>
Wed, 22 Sep 2021 04:43:33 +0000 (04:43 +0000)
commitefb66de719329ce4d96b40f00ad592cca1e432fd
treed226268a95c37c18ec8973369a304ef3202df95a
parent957e7de61ec129013ba0df90c3abe64ff024e438
LU-14677 sec: do not expose security.c to listxattr/getxattr

security.c xattr, which contains encryption context, should not be
exposed by the xattr-related system calls such as listxattr() and
getxattr() because of its special semantics.
Update sanity-sec test_57 to test this.

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I919f5cbafc53f5745fbfb5b9d2d7316e892d8c9f
Reviewed-on: https://review.whamcloud.com/44101
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Reviewed-by: Patrick Farrell <pfarrell@whamcloud.com>
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
lustre/llite/crypto.c
lustre/llite/llite_internal.h
lustre/llite/xattr.c
lustre/tests/sanity-sec.sh