[lustre-devel] [PATCH 11/28] lustre: llite: use security context if it's enabled in the kernel
James Simmons
jsimmons at infradead.org
Sat Oct 20 10:49:51 PDT 2018
> On Sun, Oct 14 2018, James Simmons wrote:
>
> > From: Alex Zhuravlev <bzzz at whamcloud.com>
> >
> > if it's disabled, then Lustre stop to work properly (can not create
> > files, etc)
> >
> > Signed-off-by: Alex Zhuravlev <bzzz at whamcloud.com>
> > WC-bug-id: https://jira.whamcloud.com/browse/LU-9578
> > Reviewed-on: https://review.whamcloud.com/27364
> > Reviewed-by: Andreas Dilger <adilger at whamcloud.com>
> > Reviewed-by: Chris Horn <hornc at cray.com>
> > Reviewed-by: James Simmons <uja.ornl at yahoo.com>
> > Reviewed-by: Sebastien Buisson <sbuisson at ddn.com>
> > Reviewed-by: Oleg Drokin <green at whamcloud.com>
> > Signed-off-by: James Simmons <jsimmons at infradead.org>
> > ---
> > drivers/staging/lustre/lustre/llite/llite_lib.c | 3 ++-
> > 1 file changed, 2 insertions(+), 1 deletion(-)
> >
> > diff --git a/drivers/staging/lustre/lustre/llite/llite_lib.c b/drivers/staging/lustre/lustre/llite/llite_lib.c
> > index 22b545e..153aa12 100644
> > --- a/drivers/staging/lustre/lustre/llite/llite_lib.c
> > +++ b/drivers/staging/lustre/lustre/llite/llite_lib.c
> > @@ -243,8 +243,9 @@ static int client_common_fill_super(struct super_block *sb, char *md, char *dt)
> > if (sbi->ll_flags & LL_SBI_ALWAYS_PING)
> > data->ocd_connect_flags &= ~OBD_CONNECT_PINGLESS;
> >
> > +#ifdef CONFIG_SECURITY
> > data->ocd_connect_flags2 |= OBD_CONNECT2_FILE_SECCTX;
> > -
> > +#endif
>
> Policy is to avoid #ifdef in .c files where possible.
> If we put something like
> #ifdef CONFIG_SECURITY
> #define OBD_CONNECT2_FILE_SECURITY (OBD_CONNECT2_FILE_SECCTX)
> #else
> #define OBD_CONNECT2_FILE_SECURITY (0)
> #endif
>
> in a .h file, then use OBD_CONNECT2_FILE_SECURITY both here and in
> obd_connect_has_secctx(),
> then the latter could would be optimized away by the compiler. Wouldn't
> be a big win I guess as it is only used once in a trivial context.
I suggest that we move obd_connect_has_secctx() to llite_internal.h. Also
that function should return bool. Besides this create an inline function
obd_connect_set_secctx() for llite_internal.h. Will submit a patch for
OpenSFS branch. Shall I redo this patch or submit a cleanup later?
> NeilBrown
>
>
> > data->ocd_brw_size = MD_MAX_BRW_SIZE;
> >
> > err = obd_connect(NULL, &sbi->ll_md_exp, sbi->ll_md_obd,
> > --
> > 1.8.3.1
>
More information about the lustre-devel
mailing list