NFS: show redacted cert_serial and privkey_serial in mount options

mount output should not reveal the contents of the serials, but indicate
they were provided.

Signed-off-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Anna Schumaker <anna.schumaker@hammerspace.com>

diff --git a/fs/nfs/super.c b/fs/nfs/super.c
index 4cd420b14ce3f3436199ea6f654177741d9eb48a..ff798b6685f8a246ecb7d816912441e274f78e82 100644 (file)
--- a/fs/nfs/super.c
+++ b/fs/nfs/super.c
@@ -509,6 +509,10 @@ static void nfs_show_mount_options(struct seq_file *m, struct nfs_server *nfss,
        default:
                break;
        }
+       if (clp->cl_xprtsec.cert_serial)
+               seq_puts(m, ",cert_serial=<redacted>");
+       if (clp->cl_xprtsec.privkey_serial)
+               seq_puts(m, ",privkey_serial=<redacted>");
 
        if (version != 4)
                nfs_show_mountd_options(m, nfss, showdefaults);