Whamcloud - gitweb
git://git.whamcloud.com
/
fs
/
lustre-release.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
LU-17612 sec: return keyring errors to userspace
2024-03-23
Sebastien Buisson
LU-17609 sec: nodemap readonly_mount for remount
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-03-23
Sebastien Buisson
LU-17317 sec: fix sanity-sec test_28
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-03-23
Sebastien Buisson
LU-17605 obdclass: do not wait forever acquiring entry
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-03-13
Sebastien Buisson
LU-17175 gss: start lsvcgssd from l_getauth
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-03-04
Sebastien Buisson
LU-16307 tests: fix sanity-sec test_31
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-03-04
Sebastien Buisson
LU-17175 gss: background speedtest for Miller-Rabin...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-23
Sebastien Buisson
LU-17528 gss: cleanup gss api usage
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-23
Sebastien Buisson
LU-17484 gss: reply error for SEC_CTX_INIT on wrong...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-23
Sebastien Buisson
LU-17454 nodemap: allow mapping for root
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-23
Sebastien Buisson
LU-17357 mgc: wait for sptlrpc config log
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-23
Sebastien Buisson
LU-17317 sec: add srpc_serverctx proc file
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-15
Sebastien Buisson
LU-17465 nodemap: change squash default value to 65534
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-15
Sebastien Buisson
LU-16498 obdclass: change uc_lock to rwlock
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-04
Sebastien Buisson
LU-17173 tests: fix security related tests
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-04
Sebastien Buisson
LU-17173 utils: cleanup lfs flushctx
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-02-04
Sebastien Buisson
LU-17173 gss: user keys go to user keyring
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-01-03
Sebastien Buisson
LU-17374 gss: get rid of rsi cache entries after req...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2024-01-03
Sebastien Buisson
LU-17317 gss: do not continue using expired reverse...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-12-20
Sebastien Buisson
LU-17317 gss: no cache flush for rsi and rsc
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-12-20
Sebastien Buisson
LU-17336 gss: fix __user pointer in rsi_upcall_seq_write
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-12-13
Sebastien Buisson
LU-17015 sec: fix PTLRPC_CTX_STATUS_MASK
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-12-13
Sebastien Buisson
LU-17015 gss: remove legacy sunrpc-cache based gss...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-11-29
Sebastien Buisson
LU-17212 gss: survive improper obd or imp at ctx init
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-11-18
Sebastien Buisson
LU-17015 gss: avoid request replay
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-11-18
Sebastien Buisson
LU-17015 gss: support large kerberos token for rpc...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-10-25
Sebastien Buisson
LU-17138 enc: prefer specific crypto engines
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-10-25
Sebastien Buisson
LU-17015 gss: support large kerberos token for rpc...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-10-16
Sebastien Buisson
LU-17015 gss: bump token buffer size to 16KiB
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-10-16
Sebastien Buisson
LU-12896 gss: key can be unlinked when timeout expires
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-10-16
Sebastien Buisson
LU-17129 tests: cleanup fileset info on nodemaps
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-09-23
Sebastien Buisson
LU-17015 obdclass: new primitives for upcall cache
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-09-23
Sebastien Buisson
LU-17108 nodemap: make map_mode available for default nm
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-09-23
Sebastien Buisson
LU-17015 obdclass: set cache entry/acquire expiry at...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-09-13
Sebastien Buisson
LU-17015 obdclass: make upcall cache hashtable size...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-09-06
Sebastien Buisson
LU-17023 krb: use a Kerberos realm different from default
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-09-06
Sebastien Buisson
LU-17050 tests: test Kerberos env in sanity-krb5
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-08-31
Sebastien Buisson
LU-17043 enc: fix osd lookup cache for long encrypted...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-08-31
Sebastien Buisson
LU-16816 obdclass: make import_event more robust
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-08-31
Sebastien Buisson
LU-16374 ldiskfs: implement security.encdata xattr
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-08-24
Sebastien Buisson
LU-16760 utils: support 'lfs find --attrs' and '-printf...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-08-19
Sebastien Buisson
LU-16374 enc: rename O_FILE_ENC to O_CIPHERTEXT
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-07-27
Sebastien Buisson
LU-16911 sec: quiet messages from identity upcall retry...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-07-08
Sebastien Buisson
LU-13343 gss: no sec flavor on loopback connection
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-06-20
Sebastien Buisson
LU-16888 gss: fix ptlrpc_gss automatic loading
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-06-09
Sebastien Buisson
LU-16799 tests: fix sanity-krb5
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-31
Sebastien Buisson
LU-16784 tests: fix path to lgss_sk
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-31
Sebastien Buisson
LU-16804 tests: load CONFIG at beginning of init_test_env
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-19
Sebastien Buisson
LU-16790 man: fix lctl-nodemap-modify man page
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-19
Sebastien Buisson
LU-16775 tests: cleanup target after sanity-sec test_31
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-05-09
Sebastien Buisson
LU-16758 krb: use Kerberos machine principal in client
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-18
Sebastien Buisson
LU-16708 tests: fix zconf_mount_clients for SSK
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-18
Sebastien Buisson
LU-16670 enc: make sure DoM files are correctly decrypted
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-11
Sebastien Buisson
LU-16646 krb: improve lookup of user's credentials
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-11
Sebastien Buisson
LU-16646 krb: use system ccache for Lustre services
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-11
Sebastien Buisson
LU-16646 krb: get rid of MEMORY private cache for krb...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-11
Sebastien Buisson
LU-16630 sec: improve Kerberos cross-realm trust remapping
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-04
Sebastien Buisson
LU-16676 build: always include llcrypt sources
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-04-03
Sebastien Buisson
LU-16683 tests: fix sanity-sec test_61 for SSK
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-28
Sebastien Buisson
LU-16642 tests: improve sanity-sec test_61
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-21
Sebastien Buisson
LU-16524 sec: add fscrypt_admin rbac role
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-21
Sebastien Buisson
LU-16524 sec: enforce rbac roles
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-21
Sebastien Buisson
LU-16524 nodemap: add rbac property to nodemap
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-03-21
Sebastien Buisson
LU-16374 ldiskfs: round-up enc file size
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-02-14
Sebastien Buisson
LU-16532 sec: session key bad keyring
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-02-14
Sebastien Buisson
LU-16494 fileset: check fileset for operations by fid
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-02-03
Sebastien Buisson
LU-16310 sec: Lustre/HSM on enc file with enc key
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-02-03
Sebastien Buisson
LU-16205 sec: fid2path for encrypted files
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-31
Sebastien Buisson
LU-16374 enc: align Base64 encoding with RFC 4648 base64url
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-27
Sebastien Buisson
LU-16445 sec: make nodemap root squash independent...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-19
Sebastien Buisson
LU-16369 ldiskfs: do not check enc context at lookup
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-19
Sebastien Buisson
LU-16444 enc: null-enc names cannot be digested form
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-13
Sebastien Buisson
LU-16165 sec: retry mechanism for identity cache
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2023-01-13
Sebastien Buisson
LU-16091 enc: S_ENCRYPTED flag on OST objects for enc...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-12-13
Sebastien Buisson
LU-16205 sec: reserve flag for fid2path for encrypted...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-11-02
Sebastien Buisson
LU-16249 sec: krb5_decrypt_bulk calls decryption primitive
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-10-15
Sebastien Buisson
LU-15451 sec: retry ro mount if read-only flag set
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-10-04
Sebastien Buisson
LU-16125 tests: make sanity-sec more robust with SSK
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-12
Sebastien Buisson
LU-15911 enc: null encrypted names is embedded llcrypt...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-06
Sebastien Buisson
LU-16085 tests: fix sanityn test_106c
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-01
Sebastien Buisson
LU-16085 llite: fix stat attributes_mask
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-01
Sebastien Buisson
LU-16012 sec: fix detection of SELinux enforcement
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-01
Sebastien Buisson
LU-16045 enc: force use of new enc xattr on new servers
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-09-01
Sebastien Buisson
LU-15003 sec: use enc pool for bounce pages
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-08-08
Sebastien Buisson
LU-15896 gss: support OpenSSLv3
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-07-11
Sebastien Buisson
LU-15922 sec: new connect flag for name encryption
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-07-11
Sebastien Buisson
LU-15451 sec: read-only nodemap flag
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-07-08
Sebastien Buisson
LU-15956 gss: allow build without ssk
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-27
Sebastien Buisson
LU-15855 enc: enc-unaware clients get ENOKEY if file...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-27
Sebastien Buisson
LU-15625 sec: fix set_param -P for root squash
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-18
Sebastien Buisson
LU-15896 gss: ignore OpenSSLv3 deprecated API
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-11
Sebastien Buisson
LU-15908 build: fix debian rules
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-11
Sebastien Buisson
LU-9243 gss: fix GSS struct definition badness
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-06-11
Sebastien Buisson
LU-15508 gss: protect from arbitrary write to init...
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-27
Sebastien Buisson
LU-15858 sec: reinstate null encryption for file names
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-27
Sebastien Buisson
LU-15848 ldiskfs: escape encrypted file names
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-06
Sebastien Buisson
LU-15810 sec: fix enc dir migration
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-05
Sebastien Buisson
LU-15787 sec: document enc-unaware clients on enc files
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-05
Sebastien Buisson
LU-15803 sec: correctly handle page lock in ll_io_zero_page
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-05-05
Sebastien Buisson
LU-15787 sec: block enc unaware clients on enc files
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
2022-03-21
Sebastien Buisson
LU-15661 nodemap: fix map mode value for 'both'
Signed-off-by:
Sebastien Buisson
<sbuisson@ddn.com>
commit
|
commitdiff
|
tree
next