Whamcloud - gitweb
git://git.whamcloud.com / fs / lustre-release.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
LU-17015 gss: avoid request replay
2023-11-18 Sebastien BuissonLU-17015 gss: avoid request replay
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-11-18 Sebastien BuissonLU-17015 gss: support large kerberos token for rpc...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-25 Sebastien BuissonLU-17138 enc: prefer specific crypto engines
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-25 Sebastien BuissonLU-17015 gss: support large kerberos token for rpc...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-16 Sebastien BuissonLU-17015 gss: bump token buffer size to 16KiB
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-16 Sebastien BuissonLU-12896 gss: key can be unlinked when timeout expires
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-10-16 Sebastien BuissonLU-17129 tests: cleanup fileset info on nodemaps
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-23 Sebastien BuissonLU-17015 obdclass: new primitives for upcall cache
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-23 Sebastien BuissonLU-17108 nodemap: make map_mode available for default nm
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-23 Sebastien BuissonLU-17015 obdclass: set cache entry/acquire expiry at...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-13 Sebastien BuissonLU-17015 obdclass: make upcall cache hashtable size...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-06 Sebastien BuissonLU-17023 krb: use a Kerberos realm different from default
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-09-06 Sebastien BuissonLU-17050 tests: test Kerberos env in sanity-krb5
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-31 Sebastien BuissonLU-17043 enc: fix osd lookup cache for long encrypted...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-31 Sebastien BuissonLU-16816 obdclass: make import_event more robust
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-31 Sebastien BuissonLU-16374 ldiskfs: implement security.encdata xattr
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-24 Sebastien BuissonLU-16760 utils: support 'lfs find --attrs' and '-printf...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-08-19 Sebastien BuissonLU-16374 enc: rename O_FILE_ENC to O_CIPHERTEXT
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-07-27 Sebastien BuissonLU-16911 sec: quiet messages from identity upcall retry...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-07-08 Sebastien BuissonLU-13343 gss: no sec flavor on loopback connection
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-06-20 Sebastien BuissonLU-16888 gss: fix ptlrpc_gss automatic loading
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-06-09 Sebastien BuissonLU-16799 tests: fix sanity-krb5
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-31 Sebastien BuissonLU-16784 tests: fix path to lgss_sk
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-31 Sebastien BuissonLU-16804 tests: load CONFIG at beginning of init_test_env
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-19 Sebastien BuissonLU-16790 man: fix lctl-nodemap-modify man page
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-19 Sebastien BuissonLU-16775 tests: cleanup target after sanity-sec test_31
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-05-09 Sebastien BuissonLU-16758 krb: use Kerberos machine principal in client
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-18 Sebastien BuissonLU-16708 tests: fix zconf_mount_clients for SSK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-18 Sebastien BuissonLU-16670 enc: make sure DoM files are correctly decrypted
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16646 krb: improve lookup of user's credentials
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16646 krb: use system ccache for Lustre services
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16646 krb: get rid of MEMORY private cache for krb...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-11 Sebastien BuissonLU-16630 sec: improve Kerberos cross-realm trust remapping
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-04 Sebastien BuissonLU-16676 build: always include llcrypt sources
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-04-03 Sebastien BuissonLU-16683 tests: fix sanity-sec test_61 for SSK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-28 Sebastien BuissonLU-16642 tests: improve sanity-sec test_61
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16524 sec: add fscrypt_admin rbac role
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16524 sec: enforce rbac roles
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16524 nodemap: add rbac property to nodemap
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-03-21 Sebastien BuissonLU-16374 ldiskfs: round-up enc file size
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-14 Sebastien BuissonLU-16532 sec: session key bad keyring
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-14 Sebastien BuissonLU-16494 fileset: check fileset for operations by fid
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-03 Sebastien BuissonLU-16310 sec: Lustre/HSM on enc file with enc key
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-02-03 Sebastien BuissonLU-16205 sec: fid2path for encrypted files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-31 Sebastien BuissonLU-16374 enc: align Base64 encoding with RFC 4648 base64url
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-27 Sebastien BuissonLU-16445 sec: make nodemap root squash independent...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-19 Sebastien BuissonLU-16369 ldiskfs: do not check enc context at lookup
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-19 Sebastien BuissonLU-16444 enc: null-enc names cannot be digested form
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-13 Sebastien BuissonLU-16165 sec: retry mechanism for identity cache
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2023-01-13 Sebastien BuissonLU-16091 enc: S_ENCRYPTED flag on OST objects for enc...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-12-13 Sebastien BuissonLU-16205 sec: reserve flag for fid2path for encrypted...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-11-02 Sebastien BuissonLU-16249 sec: krb5_decrypt_bulk calls decryption primitive
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-10-15 Sebastien BuissonLU-15451 sec: retry ro mount if read-only flag set
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-10-04 Sebastien BuissonLU-16125 tests: make sanity-sec more robust with SSK
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-12 Sebastien BuissonLU-15911 enc: null encrypted names is embedded llcrypt...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-06 Sebastien BuissonLU-16085 tests: fix sanityn test_106c
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-16085 llite: fix stat attributes_mask
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-16012 sec: fix detection of SELinux enforcement
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-16045 enc: force use of new enc xattr on new servers
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-09-01 Sebastien BuissonLU-15003 sec: use enc pool for bounce pages
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-08-08 Sebastien BuissonLU-15896 gss: support OpenSSLv3
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-07-11 Sebastien BuissonLU-15922 sec: new connect flag for name encryption
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-07-11 Sebastien BuissonLU-15451 sec: read-only nodemap flag
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-07-08 Sebastien BuissonLU-15956 gss: allow build without ssk
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-27 Sebastien BuissonLU-15855 enc: enc-unaware clients get ENOKEY if file...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-27 Sebastien BuissonLU-15625 sec: fix set_param -P for root squash
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-18 Sebastien BuissonLU-15896 gss: ignore OpenSSLv3 deprecated API
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-11 Sebastien BuissonLU-15908 build: fix debian rules
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-11 Sebastien BuissonLU-9243 gss: fix GSS struct definition badness
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-06-11 Sebastien BuissonLU-15508 gss: protect from arbitrary write to init...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-27 Sebastien BuissonLU-15858 sec: reinstate null encryption for file names
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-27 Sebastien BuissonLU-15848 ldiskfs: escape encrypted file names
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-06 Sebastien BuissonLU-15810 sec: fix enc dir migration
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-05 Sebastien BuissonLU-15787 sec: document enc-unaware clients on enc files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-05 Sebastien BuissonLU-15803 sec: correctly handle page lock in ll_io_zero_page
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-05-05 Sebastien BuissonLU-15787 sec: block enc unaware clients on enc files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-03-21 Sebastien BuissonLU-15661 nodemap: fix map mode value for 'both'
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-03-17 Sebastien BuissonLU-15608 sec: fix DIO for encrypted files
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-31 Sebastien BuissonLU-15176 sec: present .fscrypt in subdir mount
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-18 Sebastien BuissonLU-15176 sec: allow subdir mount of encrypted dir
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-18 Sebastien BuissonLU-13717 sec: make client encryption compatible with...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-18 Sebastien BuissonLU-15407 test: remove dummy enc key at cleanup
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-18 Sebastien BuissonLU-15406 sec: fix in-kernel fscrypt support
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2022-01-11 Sebastien BuissonLU-15408 sec: confirm encrypted file's hash
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-12-23 Sebastien BuissonLU-13717 sec: fix handling of encrypted file with long...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-12-23 Sebastien BuissonLU-14677 sec: remove MIGRATION_ compatibility defines
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-12-23 Sebastien BuissonLU-14677 sec: no encryption key migrate/extend/resync...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-30 Sebastien BuissonLU-15184 llite: properly detect SELinux disabled case
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-20 Sebastien BuissonLU-15141 quota: optimize capability check for root...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-03 Sebastien BuissonLU-15098 tests: sanity-sec 27a exec commands on right...
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-03 Sebastien BuissonLU-13717 sec: missing defs in includes for client encryption
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-03 Sebastien BuissonLU-14929 gss: detect libkeyutils dependency
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-11-03 Sebastien BuissonLU-15047 gss: gss integrity check with multi-rail
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-27 Sebastien BuissonLU-14937 build: re-use config cache in 'make rpms/debs'
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-17 Sebastien BuissonLU-15064 tests: sanity-sec test_58 must read its own dir
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-17 Sebastien BuissonLU-14989 sec: keep encryption context in xattr cache
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-10 Sebastien BuissonLU-14797 nodemap: map project id
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-10 Sebastien BuissonLU-14797 sec: add projid to nodemap
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-01 Sebastien BuissonLU-14629 sec: do not block rename of topmost encrypted dir
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
2021-10-01 Sebastien BuissonLU-14989 sec: access to enc file's xattrs
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
 commit | commitdiff | tree
next
Lustre primary development and releases