diff options
| author | Jeff Layton <jlayton@kernel.org> | 2021-07-01 20:40:51 +0200 |
|---|---|---|
| committer | Ilya Dryomov <idryomov@gmail.com> | 2023-08-24 11:24:35 +0200 |
| commit | 94af0470924c6368b07f9125fde29d6698ed1558 (patch) | |
| tree | e57d43966918a93ab86b2110e4c1ea4f90690529 /fs/namespace.c | |
| parent | ceph: create symlinks with encrypted and base64-encoded targets (diff) | |
| download | linux-94af0470924c6368b07f9125fde29d6698ed1558.tar.xz linux-94af0470924c6368b07f9125fde29d6698ed1558.zip | |
ceph: add some fscrypt guardrails
Add the appropriate calls into fscrypt for various actions, including
link, rename, setattr, and the open codepaths.
Disable fallocate for encrypted inodes -- hopefully, just for now.
If we have an encrypted inode, then the client will need to re-encrypt
the contents of the new object. Disable copy offload to or from
encrypted inodes.
Set i_blkbits to crypto block size for encrypted inodes -- some of the
underlying infrastructure for fscrypt relies on i_blkbits being aligned
to crypto blocksize.
Report STATX_ATTR_ENCRYPTED on encrypted inodes.
[ lhenriques: forbid encryption with striped layouts ]
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Reviewed-by: Xiubo Li <xiubli@redhat.com>
Reviewed-and-tested-by: Luís Henriques <lhenriques@suse.de>
Reviewed-by: Milind Changire <mchangir@redhat.com>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Diffstat (limited to 'fs/namespace.c')
0 files changed, 0 insertions, 0 deletions