Whamcloud - gitweb
LU-15922 sec: new connect flag for name encryption 74/47574/4
authorSebastien Buisson <sbuisson@ddn.com>
Thu, 9 Jun 2022 08:00:52 +0000 (10:00 +0200)
committerSebastien Buisson <sbuisson@ddn.com>
Thu, 30 Jun 2022 13:26:57 +0000 (15:26 +0200)
commitf76a926f59e75b743b1c638308d923275b87539b
tree082755a25b0964de9ea0d4808f004deefbd9a752
parentcb0220db3ce517b0e2fce93c864e6c3dbb61b5e0
LU-15922 sec: new connect flag for name encryption

Introduce OBD_CONNECT2_ENCRYPT_NAME connection flag for compatibility
with older versions that do not support name encryption.
When server side does not have this flag, client side is forced to
null encryption for file names. And client needs to use old xattr to
store encryption context.

Also update tests in sanity-sec to exercise name encryption only if
server side supports it.

Fixes: ed4a625d88 ("LU-13717 sec: filename encryption - digest support")
Test-Parameters: serverversion=2.14 testlist=sanity-sec mdscount=2 mdtcount=4 osscount=1 ostcount=8 clientcount=2 fstype=ldiskfs
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I446a4caba8e45821d701628a14c96f03cb6c4525
17 files changed:
libcfs/include/libcfs/crypto/llcrypt.h
libcfs/libcfs/crypto/keysetup.c
lustre/include/lustre_crypto.h
lustre/include/uapi/linux/lustre/lustre_idl.h
lustre/llite/crypto.c
lustre/llite/llite_internal.h
lustre/llite/llite_lib.c
lustre/llite/lproc_llite.c
lustre/llite/namei.c
lustre/llite/statahead.c
lustre/llite/super25.c
lustre/llite/xattr_cache.c
lustre/obdclass/lprocfs_status.c
lustre/ptlrpc/wiretest.c
lustre/tests/sanity-sec.sh
lustre/utils/wirecheck.c
lustre/utils/wiretest.c