Whamcloud - gitweb
git://git.whamcloud.com / fs / lustre-release.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
LU-17609 sec: nodemap readonly_mount for remount
2024-03-23 Sebastien BuissonLU-17609 sec: nodemap readonly_mount for remount
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-03-23 Sebastien BuissonLU-17317 sec: fix sanity-sec test_28
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-03-23 Sebastien BuissonLU-17605 obdclass: do not wait forever acquiring entry
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-03-13 Sebastien BuissonLU-17175 gss: start lsvcgssd from l_getauth
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-03-04 Sebastien BuissonLU-16307 tests: fix sanity-sec test_31
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-03-04 Sebastien BuissonLU-17175 gss: background speedtest for Miller-Rabin...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-23 Sebastien BuissonLU-17528 gss: cleanup gss api usage
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-23 Sebastien BuissonLU-17484 gss: reply error for SEC_CTX_INIT on wrong...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-23 Sebastien BuissonLU-17454 nodemap: allow mapping for root
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-23 Sebastien BuissonLU-17357 mgc: wait for sptlrpc config log
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-23 Sebastien BuissonLU-17317 sec: add srpc_serverctx proc file
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-15 Sebastien BuissonLU-17465 nodemap: change squash default value to 65534
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-15 Sebastien BuissonLU-16498 obdclass: change uc_lock to rwlock
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-04 Sebastien BuissonLU-17173 tests: fix security related tests
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-04 Sebastien BuissonLU-17173 utils: cleanup lfs flushctx
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-02-04 Sebastien BuissonLU-17173 gss: user keys go to user keyring
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-01-03 Sebastien BuissonLU-17374 gss: get rid of rsi cache entries after req...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2024-01-03 Sebastien BuissonLU-17317 gss: do not continue using expired reverse...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-12-20 Sebastien BuissonLU-17317 gss: no cache flush for rsi and rsc
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-12-20 Sebastien BuissonLU-17336 gss: fix __user pointer in rsi_upcall_seq_write
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-12-13 Sebastien BuissonLU-17015 sec: fix PTLRPC_CTX_STATUS_MASK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-12-13 Sebastien BuissonLU-17015 gss: remove legacy sunrpc-cache based gss...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-11-29 Sebastien BuissonLU-17212 gss: survive improper obd or imp at ctx init
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-11-18 Sebastien BuissonLU-17015 gss: avoid request replay
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-11-18 Sebastien BuissonLU-17015 gss: support large kerberos token for rpc...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-25 Sebastien BuissonLU-17138 enc: prefer specific crypto engines
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-25 Sebastien BuissonLU-17015 gss: support large kerberos token for rpc...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-16 Sebastien BuissonLU-17015 gss: bump token buffer size to 16KiB
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-16 Sebastien BuissonLU-12896 gss: key can be unlinked when timeout expires
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-16 Sebastien BuissonLU-17129 tests: cleanup fileset info on nodemaps
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-23 Sebastien BuissonLU-17015 obdclass: new primitives for upcall cache
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-23 Sebastien BuissonLU-17108 nodemap: make map_mode available for default nm
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-23 Sebastien BuissonLU-17015 obdclass: set cache entry/acquire expiry at...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-13 Sebastien BuissonLU-17015 obdclass: make upcall cache hashtable size...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-06 Sebastien BuissonLU-17023 krb: use a Kerberos realm different from default
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-06 Sebastien BuissonLU-17050 tests: test Kerberos env in sanity-krb5
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-31 Sebastien BuissonLU-17043 enc: fix osd lookup cache for long encrypted...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-31 Sebastien BuissonLU-16816 obdclass: make import_event more robust
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-31 Sebastien BuissonLU-16374 ldiskfs: implement security.encdata xattr
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-24 Sebastien BuissonLU-16760 utils: support 'lfs find --attrs' and '-printf...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-19 Sebastien BuissonLU-16374 enc: rename O_FILE_ENC to O_CIPHERTEXT
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-07-27 Sebastien BuissonLU-16911 sec: quiet messages from identity upcall retry...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-07-08 Sebastien BuissonLU-13343 gss: no sec flavor on loopback connection
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-06-20 Sebastien BuissonLU-16888 gss: fix ptlrpc_gss automatic loading
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-06-09 Sebastien BuissonLU-16799 tests: fix sanity-krb5
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-31 Sebastien BuissonLU-16784 tests: fix path to lgss_sk
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-31 Sebastien BuissonLU-16804 tests: load CONFIG at beginning of init_test_env
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-19 Sebastien BuissonLU-16790 man: fix lctl-nodemap-modify man page
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-19 Sebastien BuissonLU-16775 tests: cleanup target after sanity-sec test_31
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-09 Sebastien BuissonLU-16758 krb: use Kerberos machine principal in client
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-18 Sebastien BuissonLU-16708 tests: fix zconf_mount_clients for SSK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-18 Sebastien BuissonLU-16670 enc: make sure DoM files are correctly decrypted
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16646 krb: improve lookup of user's credentials
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16646 krb: use system ccache for Lustre services
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16646 krb: get rid of MEMORY private cache for krb...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16630 sec: improve Kerberos cross-realm trust remapping
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-04 Sebastien BuissonLU-16676 build: always include llcrypt sources
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-03 Sebastien BuissonLU-16683 tests: fix sanity-sec test_61 for SSK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-28 Sebastien BuissonLU-16642 tests: improve sanity-sec test_61
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16524 sec: add fscrypt_admin rbac role
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16524 sec: enforce rbac roles
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16524 nodemap: add rbac property to nodemap
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16374 ldiskfs: round-up enc file size
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-14 Sebastien BuissonLU-16532 sec: session key bad keyring
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-14 Sebastien BuissonLU-16494 fileset: check fileset for operations by fid
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-03 Sebastien BuissonLU-16310 sec: Lustre/HSM on enc file with enc key
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-03 Sebastien BuissonLU-16205 sec: fid2path for encrypted files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-31 Sebastien BuissonLU-16374 enc: align Base64 encoding with RFC 4648 base64url
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-27 Sebastien BuissonLU-16445 sec: make nodemap root squash independent...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-19 Sebastien BuissonLU-16369 ldiskfs: do not check enc context at lookup
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-19 Sebastien BuissonLU-16444 enc: null-enc names cannot be digested form
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-13 Sebastien BuissonLU-16165 sec: retry mechanism for identity cache
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-13 Sebastien BuissonLU-16091 enc: S_ENCRYPTED flag on OST objects for enc...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-12-13 Sebastien BuissonLU-16205 sec: reserve flag for fid2path for encrypted...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-11-02 Sebastien BuissonLU-16249 sec: krb5_decrypt_bulk calls decryption primitive
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-10-15 Sebastien BuissonLU-15451 sec: retry ro mount if read-only flag set
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-10-04 Sebastien BuissonLU-16125 tests: make sanity-sec more robust with SSK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-12 Sebastien BuissonLU-15911 enc: null encrypted names is embedded llcrypt...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-06 Sebastien BuissonLU-16085 tests: fix sanityn test_106c
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-16085 llite: fix stat attributes_mask
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-16012 sec: fix detection of SELinux enforcement
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-16045 enc: force use of new enc xattr on new servers
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-15003 sec: use enc pool for bounce pages
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-08-08 Sebastien BuissonLU-15896 gss: support OpenSSLv3
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-07-11 Sebastien BuissonLU-15922 sec: new connect flag for name encryption
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-07-11 Sebastien BuissonLU-15451 sec: read-only nodemap flag
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-07-08 Sebastien BuissonLU-15956 gss: allow build without ssk
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-27 Sebastien BuissonLU-15855 enc: enc-unaware clients get ENOKEY if file...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-27 Sebastien BuissonLU-15625 sec: fix set_param -P for root squash
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-18 Sebastien BuissonLU-15896 gss: ignore OpenSSLv3 deprecated API
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-11 Sebastien BuissonLU-15908 build: fix debian rules
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-11 Sebastien BuissonLU-9243 gss: fix GSS struct definition badness
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-11 Sebastien BuissonLU-15508 gss: protect from arbitrary write to init...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-27 Sebastien BuissonLU-15858 sec: reinstate null encryption for file names
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-27 Sebastien BuissonLU-15848 ldiskfs: escape encrypted file names
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-06 Sebastien BuissonLU-15810 sec: fix enc dir migration
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-05 Sebastien BuissonLU-15787 sec: document enc-unaware clients on enc files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-05 Sebastien BuissonLU-15803 sec: correctly handle page lock in ll_io_zero_page
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-05 Sebastien BuissonLU-15787 sec: block enc unaware clients on enc files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-03-21 Sebastien BuissonLU-15661 nodemap: fix map mode value for 'both'
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
next
Lustre primary development and releases