]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
afs: Fix the non-encryption of calls
authorDavid Howells <dhowells@redhat.com>
Thu, 10 May 2018 22:10:40 +0000 (23:10 +0100)
committerStefan Bader <stefan.bader@canonical.com>
Mon, 1 Oct 2018 12:57:05 +0000 (14:57 +0200)
commit7025f11d59e1a9cc9e2db8bc8f95337e1fe60dcd
treea9f05bff2e9218c7571cf006892551a103b312f6
parent738d1716593938d61ff719c5f8634d9dc4c446b5
afs: Fix the non-encryption of calls

BugLink: http://bugs.launchpad.net/bugs/1794889
[ Upstream commit 4776cab43fd3111618112737a257dc3ef368eddd ]

Some AFS servers refuse to accept unencrypted traffic, so can't be accessed
with kAFS.  Set the AF_RXRPC security level to encrypt client calls to deal
with this.

Note that incoming service calls are set by the remote client and so aren't
affected by this.

This requires an AF_RXRPC patch to pass the value set by setsockopt to calls
begun by the kernel.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
fs/afs/rxrpc.c