From: Sagi Grimberg <sagi@grimberg.me>
Date: Tue, 28 Apr 2026 08:15:14 +0000 (+0300)
Subject: NFS: show redacted cert_serial and privkey_serial in mount options
X-Git-Tag: v7.2-rc1~46^2~32
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=f74ad9eee7221ca67fa489b44c3d065c54e65d4d;p=thirdparty%2Fkernel%2Flinux.git

NFS: show redacted cert_serial and privkey_serial in mount options

mount output should not reveal the contents of the serials, but indicate
they were provided.

Signed-off-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Anna Schumaker <anna.schumaker@hammerspace.com>
---

diff --git a/fs/nfs/super.c b/fs/nfs/super.c
index 4cd420b14ce3f..ff798b6685f8a 100644
--- a/fs/nfs/super.c
+++ b/fs/nfs/super.c
@@ -509,6 +509,10 @@ static void nfs_show_mount_options(struct seq_file *m, struct nfs_server *nfss,
 	default:
 		break;
 	}
+	if (clp->cl_xprtsec.cert_serial)
+		seq_puts(m, ",cert_serial=<redacted>");
+	if (clp->cl_xprtsec.privkey_serial)
+		seq_puts(m, ",privkey_serial=<redacted>");
 
 	if (version != 4)
 		nfs_show_mountd_options(m, nfss, showdefaults);