History

NFSD: Handle new xprtsec= export option

Enable administrators to require clients to use transport layer security when accessing particular exports.

Chuck Lever committed 3 years ago

Commit 9280c571 parent b3cbf983 files · +62 −3Browse files

Showing the changes to include/uapi (1 of 3 files). Show all

Unified · Split

include/uapi/linux/nfsd/export.h+13−0
@@ -62,5 +62,18 @@ · 61 unmodified lines
6262 | NFSEXP_ALLSQUASH \
6363 | NFSEXP_INSECURE_PORT)
6464
65+/*
66+ * Transport layer security policies that are permitted to access
67+ * an export
68+ */
69+#define NFSEXP_XPRTSEC_NONE 0x0001
70+#define NFSEXP_XPRTSEC_TLS 0x0002
71+#define NFSEXP_XPRTSEC_MTLS 0x0004
72+
73+#define NFSEXP_XPRTSEC_NUM (3)
74+
75+#define NFSEXP_XPRTSEC_ALL (NFSEXP_XPRTSEC_NONE | \
76+ NFSEXP_XPRTSEC_TLS | \
77+ NFSEXP_XPRTSEC_MTLS)
6578
6679 #endif /* _UAPINFSD_EXPORT_H */