[PATCH 0/2] nvme: restrict authentication to the admin queue

Hannes Reinecke hare at suse.de
Tue Aug 20 07:06:17 PDT 2024


On 7/17/24 13:03, Hannes Reinecke wrote:
> Hi all,
> 
> it might be an idea to restrict authentication to the admin queue only,
> as authentication on I/O queues brings only so much additional benefit,
> and the entire authentication is noticeably faster.
> This patchsets enables the host to handle this situation, and adds a
> new configfs entry 'dhchap_admin_only' for the target to enable this
> behaviour.
> Patches are on top of my 'secure-concat.v5' branch on kernel.org.
> 
> As usual, comments and reviews are welcome.
> 
> Hannes Reinecke (2):
>    nvme: Do not re-authenticate queues with no prior authentication
>    nvmet: Implement 'admin_only' authentication
> 
>   drivers/nvme/host/auth.c               | 17 ++++++++++++++++-
>   drivers/nvme/target/auth.c             | 11 +++++++----
>   drivers/nvme/target/configfs.c         | 24 ++++++++++++++++++++++++
>   drivers/nvme/target/fabrics-cmd-auth.c |  7 +++++++
>   drivers/nvme/target/fabrics-cmd.c      |  7 +++++--
>   drivers/nvme/target/nvmet.h            |  2 ++
>   6 files changed, 61 insertions(+), 7 deletions(-)
> 
Ping? What's the status here? Should I resend?

Cheers,

Hannes
-- 
Dr. Hannes Reinecke                  Kernel Storage Architect
hare at suse.de                                +49 911 74053 688
SUSE Software Solutions GmbH, Frankenstr. 146, 90461 Nürnberg
HRB 36809 (AG Nürnberg), GF: I. Totev, A. McDonald, W. Knoblich




More information about the Linux-nvme mailing list