[PATCH 0/2] nvme: restrict authentication to the admin queue

Hannes Reinecke hare at kernel.org
Wed Jul 17 04:03:36 PDT 2024


Hi all,

it might be an idea to restrict authentication to the admin queue only,
as authentication on I/O queues brings only so much additional benefit,
and the entire authentication is noticeably faster.
This patchsets enables the host to handle this situation, and adds a
new configfs entry 'dhchap_admin_only' for the target to enable this
behaviour.
Patches are on top of my 'secure-concat.v5' branch on kernel.org.

As usual, comments and reviews are welcome.

Hannes Reinecke (2):
  nvme: Do not re-authenticate queues with no prior authentication
  nvmet: Implement 'admin_only' authentication

 drivers/nvme/host/auth.c               | 17 ++++++++++++++++-
 drivers/nvme/target/auth.c             | 11 +++++++----
 drivers/nvme/target/configfs.c         | 24 ++++++++++++++++++++++++
 drivers/nvme/target/fabrics-cmd-auth.c |  7 +++++++
 drivers/nvme/target/fabrics-cmd.c      |  7 +++++--
 drivers/nvme/target/nvmet.h            |  2 ++
 6 files changed, 61 insertions(+), 7 deletions(-)

-- 
2.35.3




More information about the Linux-nvme mailing list