]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
NFSD: Add a key for signing filehandles
authorBenjamin Coddington <bcodding@hammerspace.com>
Wed, 25 Feb 2026 12:51:36 +0000 (07:51 -0500)
committerChuck Lever <chuck.lever@oracle.com>
Mon, 30 Mar 2026 01:25:09 +0000 (21:25 -0400)
commit62346217fd722510c3551858ad7d0fcfab8cce7e
tree25bc45949eb65a157cec3cc0dd2fbbf8e7595b7f
parent116b6b7acdd82605ed530232cd7509d1b5282f5c
NFSD: Add a key for signing filehandles

A future patch will enable NFSD to sign filehandles by appending a Message
Authentication Code(MAC).  To do this, NFSD requires a secret 128-bit key
that can persist across reboots.  A persisted key allows the server to
accept filehandles after a restart.  Enable NFSD to be configured with this
key via the netlink interface.

Link: https://lore.kernel.org/linux-nfs/cover.1772022373.git.bcodding@hammerspace.com
Signed-off-by: Benjamin Coddington <bcodding@hammerspace.com>
Reviewed-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Documentation/netlink/specs/nfsd.yaml
fs/nfsd/netlink.c
fs/nfsd/netns.h
fs/nfsd/nfsctl.c
fs/nfsd/trace.h
include/uapi/linux/nfsd_netlink.h