Whamcloud - gitweb
git://git.whamcloud.com / fs / lustre-release.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
LU-16958 llite: migrate vs regular ops deadlock
2023-07-27 Sebastien BuissonLU-16911 sec: quiet messages from identity upcall retry...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-07-08 Sebastien BuissonLU-13343 gss: no sec flavor on loopback connection
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-06-20 Sebastien BuissonLU-16888 gss: fix ptlrpc_gss automatic loading
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-06-09 Sebastien BuissonLU-16799 tests: fix sanity-krb5
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-31 Sebastien BuissonLU-16784 tests: fix path to lgss_sk
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-31 Sebastien BuissonLU-16804 tests: load CONFIG at beginning of init_test_env
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-19 Sebastien BuissonLU-16790 man: fix lctl-nodemap-modify man page
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-19 Sebastien BuissonLU-16775 tests: cleanup target after sanity-sec test_31
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-09 Sebastien BuissonLU-16758 krb: use Kerberos machine principal in client
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-18 Sebastien BuissonLU-16708 tests: fix zconf_mount_clients for SSK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-18 Sebastien BuissonLU-16670 enc: make sure DoM files are correctly decrypted
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16646 krb: improve lookup of user's credentials
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16646 krb: use system ccache for Lustre services
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16646 krb: get rid of MEMORY private cache for krb...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16630 sec: improve Kerberos cross-realm trust remapping
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-04 Sebastien BuissonLU-16676 build: always include llcrypt sources
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-03 Sebastien BuissonLU-16683 tests: fix sanity-sec test_61 for SSK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-28 Sebastien BuissonLU-16642 tests: improve sanity-sec test_61
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16524 sec: add fscrypt_admin rbac role
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16524 sec: enforce rbac roles
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16524 nodemap: add rbac property to nodemap
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16374 ldiskfs: round-up enc file size
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-14 Sebastien BuissonLU-16532 sec: session key bad keyring
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-14 Sebastien BuissonLU-16494 fileset: check fileset for operations by fid
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-03 Sebastien BuissonLU-16310 sec: Lustre/HSM on enc file with enc key
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-03 Sebastien BuissonLU-16205 sec: fid2path for encrypted files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-31 Sebastien BuissonLU-16374 enc: align Base64 encoding with RFC 4648 base64url
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-27 Sebastien BuissonLU-16445 sec: make nodemap root squash independent...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-19 Sebastien BuissonLU-16369 ldiskfs: do not check enc context at lookup
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-19 Sebastien BuissonLU-16444 enc: null-enc names cannot be digested form
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-13 Sebastien BuissonLU-16165 sec: retry mechanism for identity cache
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-13 Sebastien BuissonLU-16091 enc: S_ENCRYPTED flag on OST objects for enc...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-12-13 Sebastien BuissonLU-16205 sec: reserve flag for fid2path for encrypted...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-11-02 Sebastien BuissonLU-16249 sec: krb5_decrypt_bulk calls decryption primitive
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-10-15 Sebastien BuissonLU-15451 sec: retry ro mount if read-only flag set
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-10-04 Sebastien BuissonLU-16125 tests: make sanity-sec more robust with SSK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-12 Sebastien BuissonLU-15911 enc: null encrypted names is embedded llcrypt...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-06 Sebastien BuissonLU-16085 tests: fix sanityn test_106c
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-16085 llite: fix stat attributes_mask
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-16012 sec: fix detection of SELinux enforcement
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-16045 enc: force use of new enc xattr on new servers
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-15003 sec: use enc pool for bounce pages
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-08-08 Sebastien BuissonLU-15896 gss: support OpenSSLv3
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-07-11 Sebastien BuissonLU-15922 sec: new connect flag for name encryption
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-07-11 Sebastien BuissonLU-15451 sec: read-only nodemap flag
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-07-08 Sebastien BuissonLU-15956 gss: allow build without ssk
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-27 Sebastien BuissonLU-15855 enc: enc-unaware clients get ENOKEY if file...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-27 Sebastien BuissonLU-15625 sec: fix set_param -P for root squash
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-18 Sebastien BuissonLU-15896 gss: ignore OpenSSLv3 deprecated API
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-11 Sebastien BuissonLU-15908 build: fix debian rules
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-11 Sebastien BuissonLU-9243 gss: fix GSS struct definition badness
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-11 Sebastien BuissonLU-15508 gss: protect from arbitrary write to init...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-27 Sebastien BuissonLU-15858 sec: reinstate null encryption for file names
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-27 Sebastien BuissonLU-15848 ldiskfs: escape encrypted file names
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-06 Sebastien BuissonLU-15810 sec: fix enc dir migration
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-05 Sebastien BuissonLU-15787 sec: document enc-unaware clients on enc files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-05 Sebastien BuissonLU-15803 sec: correctly handle page lock in ll_io_zero_page
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-05 Sebastien BuissonLU-15787 sec: block enc unaware clients on enc files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-03-21 Sebastien BuissonLU-15661 nodemap: fix map mode value for 'both'
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-03-17 Sebastien BuissonLU-15608 sec: fix DIO for encrypted files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-31 Sebastien BuissonLU-15176 sec: present .fscrypt in subdir mount
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-18 Sebastien BuissonLU-15176 sec: allow subdir mount of encrypted dir
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-18 Sebastien BuissonLU-13717 sec: make client encryption compatible with...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-18 Sebastien BuissonLU-15407 test: remove dummy enc key at cleanup
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-18 Sebastien BuissonLU-15406 sec: fix in-kernel fscrypt support
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-11 Sebastien BuissonLU-15408 sec: confirm encrypted file's hash
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-12-23 Sebastien BuissonLU-13717 sec: fix handling of encrypted file with long...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-12-23 Sebastien BuissonLU-14677 sec: remove MIGRATION_ compatibility defines
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-12-23 Sebastien BuissonLU-14677 sec: no encryption key migrate/extend/resync...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-30 Sebastien BuissonLU-15184 llite: properly detect SELinux disabled case
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-20 Sebastien BuissonLU-15141 quota: optimize capability check for root...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-03 Sebastien BuissonLU-15098 tests: sanity-sec 27a exec commands on right...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-03 Sebastien BuissonLU-13717 sec: missing defs in includes for client encryption
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-03 Sebastien BuissonLU-14929 gss: detect libkeyutils dependency
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-03 Sebastien BuissonLU-15047 gss: gss integrity check with multi-rail
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-27 Sebastien BuissonLU-14937 build: re-use config cache in 'make rpms/debs'
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-17 Sebastien BuissonLU-15064 tests: sanity-sec test_58 must read its own dir
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-17 Sebastien BuissonLU-14989 sec: keep encryption context in xattr cache
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-10 Sebastien BuissonLU-14797 nodemap: map project id
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-10 Sebastien BuissonLU-14797 sec: add projid to nodemap
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-01 Sebastien BuissonLU-14629 sec: do not block rename of topmost encrypted dir
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-01 Sebastien BuissonLU-14989 sec: access to enc file's xattrs
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-09-29 Sebastien BuissonLU-15027 sec: initialize ll_inode_info for fake inode
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-09-22 Sebastien BuissonLU-14677 sec: do not expose security.c to listxattr...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-09-22 Sebastien BuissonLU-14677 llite: move env contexts to ll_inode_info...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-09-22 Sebastien BuissonLU-13717 sec: filename encryption - symlink support
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-09-17 Sebastien BuissonLU-13717 sec: filename encryption - digest support
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-09-11 Sebastien BuissonLU-13717 sec: filename encryption
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-07-27 Sebastien BuissonLU-13717 sec: handle null algo for filename encryption
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-07-22 Sebastien BuissonLU-14833 sec: quiet spurious gss_init_svc_upcall()...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-07-22 Sebastien BuissonLU-14804 nodemap: do not return error for improper ACL
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-07-12 Sebastien BuissonLU-14677 sec: migrate/extend/split on encrypted file
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-07-12 Sebastien BuissonLU-14739 quota: nodemap squashed root cannot bypass...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-06-02 Sebastien BuissonLU-13717 sec: limit hard links to linkEA size for enc...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-06-02 Sebastien BuissonLU-14629 sec: forbid file rename from enc to unencrypted dir
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-05-27 Sebastien BuissonLU-14673 sec: annotate algorithms taking optional key
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-05-06 Sebastien BuissonLU-14669 tests: reduce time spent in sanity-sec
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-05-05 Sebastien BuissonLU-13717 sec: rework includes for client encryption
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-04-06 Sebastien BuissonLU-14538 gss: make namespace optional in lgss_keyring
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-03-30 Sebastien BuissonLU-14534 gss: do not refresh context for LDLM callback
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
next
Lustre primary development and releases