Details

    • Bug
    • Resolution: Fixed
    • Minor
    • Lustre 2.15.0
    • Lustre 2.15.0
    • None
    • 3
    • 9223372036854775807

    Description

      When files are encrypted in Lustre using fscrypt, they should normally not be accessible to users without the proper encryption key. However, if a user has the encryption key loaded when they read a file, it may be decrypted in memory and saved to the PCC device in unencrypted form.
      For now we should just disable PCC caching of encrypted files.

      Attachments

        Activity

          [LU-15217] disable PCC for encrypted files
          pjones Peter Jones added a comment -

          Landed for 2.15

          pjones Peter Jones added a comment - Landed for 2.15

          "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/45545/
          Subject: LU-15217 pcc: disable PCC for encrypted files
          Project: fs/lustre-release
          Branch: master
          Current Patch Set:
          Commit: f8c79eea11ac960191df846cb9c95ed6eb6385fb

          gerrit Gerrit Updater added a comment - "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/45545/ Subject: LU-15217 pcc: disable PCC for encrypted files Project: fs/lustre-release Branch: master Current Patch Set: Commit: f8c79eea11ac960191df846cb9c95ed6eb6385fb

          "Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/45545
          Subject: LU-15217 pcc: disable PCC for encrypted files
          Project: fs/lustre-release
          Branch: master
          Current Patch Set: 1
          Commit: da2500f26c14498c5fbf24c2d834c28a0d6ff198

          gerrit Gerrit Updater added a comment - "Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/45545 Subject: LU-15217 pcc: disable PCC for encrypted files Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: da2500f26c14498c5fbf24c2d834c28a0d6ff198

          People

            qian_wc Qian Yingjin
            sebastien Sebastien Buisson
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: