]> git.ipfire.org Git - thirdparty/linux.git/commit
NFSD/export: Add sign_fh export option
authorBenjamin Coddington <bcodding@hammerspace.com>
Wed, 25 Feb 2026 12:51:37 +0000 (07:51 -0500)
committerChuck Lever <chuck.lever@oracle.com>
Mon, 30 Mar 2026 01:25:09 +0000 (21:25 -0400)
commita002ad8a9bc89c084bc40933065c88336700837e
treefff80a3bb600fe6663bcf942cfa9f6b06582278e
parent62346217fd722510c3551858ad7d0fcfab8cce7e
NFSD/export: Add sign_fh export option

In order to signal that filehandles on this export should be signed, add a
"sign_fh" export option.  Filehandle signing can help the server defend
against certain filehandle guessing attacks.

Setting the "sign_fh" export option sets NFSEXP_SIGN_FH.  In a future patch
NFSD uses this signal to append a MAC onto filehandles for that export.

While we're in here, tidy a few stray expflags to more closely align to the
export flag order.

Link: https://lore.kernel.org/linux-nfs/cover.1772022373.git.bcodding@hammerspace.com
Signed-off-by: Benjamin Coddington <bcodding@hammerspace.com>
Reviewed-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
fs/nfsd/export.c
include/uapi/linux/nfsd/export.h