diff options
| author | Steve French <stfrench@microsoft.com> | 2019-09-04 04:18:49 +0200 |
|---|---|---|
| committer | Steve French <stfrench@microsoft.com> | 2019-09-16 18:43:38 +0200 |
| commit | 4f5c10f1ad45ae453822113dd0fe39ed757037fb (patch) | |
| tree | fd8938313cc6abd264afeb09e599e565945e9dab /fs/cifs/smb2transport.c | |
| parent | smb3: add dynamic tracepoints for flush and close (diff) | |
| download | linux-4f5c10f1ad45ae453822113dd0fe39ed757037fb.tar.xz linux-4f5c10f1ad45ae453822113dd0fe39ed757037fb.zip | |
smb3: allow skipping signature verification for perf sensitive configurations
Add new mount option "signloosely" which enables signing but skips the
sometimes expensive signing checks in the responses (signatures are
calculated and sent correctly in the SMB2/SMB3 requests even with this
mount option but skipped in the responses). Although weaker for security
(and also data integrity in case a packet were corrupted), this can provide
enough of a performance benefit (calculating the signature to verify a
packet can be expensive especially for large packets) to be useful in
some cases.
Signed-off-by: Steve French <stfrench@microsoft.com>
Reviewed-by: Ronnie Sahlberg <lsahlber@redhat.com>
Diffstat (limited to 'fs/cifs/smb2transport.c')
| -rw-r--r-- | fs/cifs/smb2transport.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/fs/cifs/smb2transport.c b/fs/cifs/smb2transport.c index b02242eacb55..148d7942c796 100644 --- a/fs/cifs/smb2transport.c +++ b/fs/cifs/smb2transport.c @@ -522,6 +522,7 @@ smb2_verify_signature(struct smb_rqst *rqst, struct TCP_Server_Info *server) if ((shdr->Command == SMB2_NEGOTIATE) || (shdr->Command == SMB2_SESSION_SETUP) || (shdr->Command == SMB2_OPLOCK_BREAK) || + server->ignore_signature || (!server->session_estab)) return 0; |