[PATCH 0/2] nvme: restrict authentication to the admin queue
Hannes Reinecke
hare at kernel.org
Wed Jul 17 04:03:36 PDT 2024
Hi all,
it might be an idea to restrict authentication to the admin queue only,
as authentication on I/O queues brings only so much additional benefit,
and the entire authentication is noticeably faster.
This patchsets enables the host to handle this situation, and adds a
new configfs entry 'dhchap_admin_only' for the target to enable this
behaviour.
Patches are on top of my 'secure-concat.v5' branch on kernel.org.
As usual, comments and reviews are welcome.
Hannes Reinecke (2):
nvme: Do not re-authenticate queues with no prior authentication
nvmet: Implement 'admin_only' authentication
drivers/nvme/host/auth.c | 17 ++++++++++++++++-
drivers/nvme/target/auth.c | 11 +++++++----
drivers/nvme/target/configfs.c | 24 ++++++++++++++++++++++++
drivers/nvme/target/fabrics-cmd-auth.c | 7 +++++++
drivers/nvme/target/fabrics-cmd.c | 7 +++++--
drivers/nvme/target/nvmet.h | 2 ++
6 files changed, 61 insertions(+), 7 deletions(-)
--
2.35.3
More information about the Linux-nvme
mailing list