ecryptfs: added ecryptfs_mount_auth_tok_only mount parameter
authorRoberto Sassu <roberto.sassu@polito.it>
Wed, 6 Oct 2010 16:31:32 +0000 (18:31 +0200)
committerTyler Hicks <tyhicks@linux.vnet.ibm.com>
Fri, 29 Oct 2010 15:31:36 +0000 (10:31 -0500)
commitf16feb5119a87f5e683be7e8916c060abfb0e8d6
treeed80e0f8d2d8c5b63c8b48e11da4eca0163bb9f4
parent39fac853a758306285404368fbe392408057b136
ecryptfs: added ecryptfs_mount_auth_tok_only mount parameter

This patch adds a new mount parameter 'ecryptfs_mount_auth_tok_only' to
force ecryptfs to use only authentication tokens which signature has
been specified at mount time with parameters 'ecryptfs_sig' and
'ecryptfs_fnek_sig'. In this way, after disabling the passthrough and
the encrypted view modes, it's possible to make available to users only
files encrypted with the specified authentication token.

Signed-off-by: Roberto Sassu <roberto.sassu@polito.it>
Cc: Dustin Kirkland <kirkland@canonical.com>
Cc: James Morris <jmorris@namei.org>
[Tyler: Clean up coding style errors found by checkpatch]
Signed-off-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com>
fs/ecryptfs/ecryptfs_kernel.h
fs/ecryptfs/keystore.c
fs/ecryptfs/main.c