]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
nvmet-auth: Do not print DH-HMAC-CHAP secrets
authorHannes Reinecke <hare@kernel.org>
Thu, 30 Apr 2026 13:22:32 +0000 (15:22 +0200)
committerKeith Busch <kbusch@kernel.org>
Mon, 11 May 2026 15:07:39 +0000 (08:07 -0700)
commita891962ae5e48fb5476c23631df759482e62ab16
tree1740e7c8ee00cfbf7d8d230c84495a969cf87ecd
parent2279cd9c61a330e5de4d6eb0bc422820dd6fdf36
nvmet-auth: Do not print DH-HMAC-CHAP secrets

From a security standpoint we should not allow to print out the DH-HMAC-CHAP
secrets, but at the same time having them is useful for debugging
authentication failures.
So add a Kconfig option NVME_TARGET_AUTH_DEBUG to only enable debugging
if explictly requested at build time.

Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Hannes Reinecke <hare@kernel.org>
Signed-off-by: Keith Busch <kbusch@kernel.org>
drivers/nvme/target/Kconfig
drivers/nvme/target/auth.c