]> www.infradead.org Git - users/hch/xfsprogs.git/commit
xfs_io: implement 'set_encpolicy' and 'get_encpolicy' commands
authorEric Biggers <ebiggers@google.com>
Thu, 12 Jan 2017 20:12:40 +0000 (14:12 -0600)
committerEric Sandeen <sandeen@redhat.com>
Thu, 12 Jan 2017 20:12:40 +0000 (14:12 -0600)
commit0cf66b0ff6f859d5a24e65f282dc92548164dfef
treebad39e74575bb2e2c8cee3233d4eed10b3cf06d1
parent3c84c5436b4c52c9605c52ffcfdbda66fd99f7ab
xfs_io: implement 'set_encpolicy' and 'get_encpolicy' commands

Add set_encpolicy and get_encpolicy commands to xfs_io so that xfstests
will be able to test filesystem encryption using the actual user API,
not just hacked in with a mount option.  These commands use the common
"fscrypt" API currently implemented by ext4 and f2fs, but it's also
under development for ubifs and planned for xfs.

Note that to get encrypted files to actually work, it's also necessary
to add a key to the kernel keyring.  This patch does not add a command
for this to xfs_io because it's possible to do it using keyctl.  keyctl
can also be used to remove keys, revoke keys, invalidate keys, etc.

Signed-off-by: Eric Biggers <ebiggers@google.com>
Reviewed-by: Eric Sandeen <sandeen@redhat.com>
Signed-off-by: Eric Sandeen <sandeen@sandeen.net>
io/Makefile
io/encrypt.c [new file with mode: 0644]
io/init.c
io/io.h
man/man8/xfs_io.8