Eric Biggers
b32863f17f
ANDROID: dm: add dm-default-key target for metadata encryption ...
Add a device-mapper target "dm-default-key" which assigns an encryption
key to bios that aren't for the contents of an encrypted file.
This ensures that all blocks on-disk will be encrypted with some key,
without the performance hit of file contents being encrypted twice when
fscrypt (File-Based Encryption) is used.
It is only appropriate to use dm-default-key when key configuration is
tightly controlled, like it is in Android, such that all fscrypt keys
are at least as hard to compromise as the default key.
Compared to the original version of dm-default-key, this has been
modified to use the new vendor-independent inline encryption framework
(which works even when no inline encryption hardware is present), the
table syntax has been changed to match dm-crypt, and support for
specifying Adiantum encryption has been added. These changes also mean
that dm-default-key now always explicitly specifies the DUN (the IV).
Also, to handle f2fs moving blocks of encrypted files around without the
key, and to handle ext4 and f2fs filesystems mounted without
'-o inlinecrypt', the mapping logic is no longer "set a key on the bio
if it doesn't have one already", but rather "set a key on the bio unless
the bio has the bi_skip_dm_default_key flag set". Filesystems set this
flag on *all* bios for encrypted file contents, regardless of whether
they are encrypting/decrypting the file using inline encryption or the
traditional filesystem-layer encryption, or moving the raw data.
For the bi_skip_dm_default_key flag, a new field in struct bio is used
rather than a bit in bi_opf so that fscrypt_set_bio_crypt_ctx() can set
the flag, minimizing the changes needed to filesystems. (bi_opf is
usually overwritten after fscrypt_set_bio_crypt_ctx() is called.)
Bug: 137270441
Bug: 147814592
Change-Id: I69c9cd1e968ccf990e4ad96e5115b662237f5095
Signed-off-by: Eric Biggers <ebiggers@google.com>
2020-01-24 10:49:09 -08:00
partitions/aix: append null character to print data from disk
2018-07-27 09:17:41 -06:00
badblocks: fix wrong return value in badblocks_set if badblocks are disabled
2017-11-03 11:29:50 -07:00
block: bfq: swap puts in bfqg_and_blkg_put
2018-09-06 11:32:58 -06:00
blok, bfq: do not plug I/O if all queues are weight-raised
2019-11-20 18:46:44 +01:00
block, bfq: inject other-queue I/O into seeky idle queues on NCQ flash
2019-11-20 18:46:44 +01:00
block, bfq: correctly charge and reset entity service in all cases
2018-11-13 11:08:28 -08:00
ANDROID: dm: add dm-default-key target for metadata encryption
2020-01-24 10:49:09 -08:00
block/bio-integrity: fix a memory leak bug
2019-07-31 07:27:08 +02:00
BACKPORT: FROMLIST: Update Inline Encryption from v5 to v6 of patch series
2020-01-13 07:11:38 -08:00
blkcg: make blkcg_print_stat() print stats only for online blkgs
2019-11-12 19:21:19 +01:00
BACKPORT: FROMLIST: Update Inline Encryption from v5 to v6 of patch series
2020-01-13 07:11:38 -08:00
ANDROID: dm: add dm-default-key target for metadata encryption
2020-01-24 10:49:09 -08:00
ANDROID: block: fix some inline crypto bugs
2020-01-24 10:49:09 -08:00
ANDROID: block: export symbols needed for modules to use inline crypto
2020-01-24 10:49:09 -08:00
blk-mq-sched: remove unused 'can_block' arg from blk_mq_sched_insert_request
2018-01-17 09:49:21 -07:00
block: fix null pointer dereference in blk_mq_rq_timed_out()
2019-10-05 13:10:08 +02:00
block drivers/block: Use octal not symbolic permissions
2018-05-24 13:38:59 -06:00
block, mm: remove unnecessary __GFP_HIGH flag
2018-07-09 09:07:54 -06:00
This is the 4.19.73 stable release
2019-09-16 09:35:02 +02:00
block: make sure writesame bio is aligned with logical block size
2018-11-13 11:08:16 -08:00
block: fix memleak when __blk_rq_map_user_iov() is failed
2020-01-12 12:17:22 +01:00
BACKPORT: FROMLIST: Update Inline Encryption from v5 to v6 of patch series
2020-01-13 07:11:38 -08:00
blk-mq: don't keep offline CPUs mapped to hctx 0
2018-04-10 08:38:46 -06:00
block: Make struct request_queue smaller for CONFIG_BLK_DEV_ZONED=n
2018-07-09 09:07:52 -06:00
block, scsi: Change the preempt-only flag into a counter
2019-08-04 09:30:57 +02:00
block: Make struct request_queue smaller for CONFIG_BLK_DEV_ZONED=n
2018-07-09 09:07:52 -06:00
blk-mq: code clean-up by adding an API to clear set->mq_map
2018-07-09 09:07:53 -06:00
block: Add rdma affinity based queue mapping helper
2017-08-08 14:58:03 -04:00
block: mq-deadline: Fix write completion handling
2019-01-13 09:51:07 +01:00
block: mq-deadline: Fix write completion handling
2019-01-13 09:51:07 +01:00
blk-mq: make sure that line break can be printed
2019-12-17 20:35:48 +01:00
blk-mq: Allow blocking queue tag iter callbacks
2018-09-25 20:17:59 -06:00
Merge branch 'for-4.15/block' of git://git.kernel.dk/linux-block
2017-11-14 15:32:19 -08:00
blk-mq: provide a default queue mapping for virtio device
2017-02-27 20:54:05 +02:00
block: fix null pointer dereference in blk_mq_rq_timed_out()
2019-10-05 13:10:08 +02:00
blk-mq: free hw queue's resource in hctx's release handler
2019-09-16 08:22:13 +02:00
blk-wbt: fix performance regression in wbt scale_up/scale_down
2019-10-17 13:45:16 -07:00
blk-rq-qos: fix first node deletion of rq_qos_del()
2019-10-29 09:20:09 +01:00
block: fix an integer overflow in logical block size
2020-01-23 08:21:29 +01:00
block: fix timeout changes for legacy request drivers
2018-06-19 11:27:18 -06:00
blk-stat: export helpers for modifying blk_rq_stat
2018-07-09 09:07:54 -06:00
block: deactivate blk_stat timer in wbt_disable_default()
2019-01-13 09:51:06 +01:00
block: call rq_qos_exit() after queue is frozen
2019-12-01 09:17:06 +01:00
for-linus-20180616
2018-06-17 05:37:55 +09:00
blk-throttle: fix zero wait time for iops throttled group
2019-07-26 09:14:30 +02:00
blk-mq: Fix timeout handling in case the timeout handler returns BLK_EH_DONE
2018-06-23 10:25:45 -06:00
blk-wbt: fix performance regression in wbt scale_up/scale_down
2019-10-17 13:45:16 -07:00
block: remove external dependency on wbt_flags
2018-07-09 09:07:54 -06:00
block: Remove a superfluous cast from blkdev_report_zones()
2018-07-09 09:07:52 -06:00
block: fix null pointer dereference in blk_mq_rq_timed_out()
2019-10-05 13:10:08 +02:00
BACKPORT: FROMLIST: Update Inline Encryption from v5 to v6 of patch series
2020-01-13 07:11:38 -08:00
block/bsg-lib: use PTR_ERR_OR_ZERO to simplify the flow path
2018-08-01 09:13:03 -06:00
block: bsg: move atomic_t ref_count variable to refcount API
2018-08-27 19:17:02 -06:00
ANDROID: block/cfq-iosched: make group_idle per io cgroup tunable
2019-05-08 21:48:28 +00:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE
2020-01-09 10:19:01 +01:00
block drivers/block: Use octal not symbolic permissions
2018-05-24 13:38:59 -06:00
block: fix deadline elevator drain for zoned block devices
2018-09-26 19:57:24 -06:00
block: fix use-after-free on gendisk
2019-05-31 06:46:18 -07:00
block: pass inclusive 'lend' parameter to truncate_inode_pages_range
2018-02-23 15:20:19 -07:00
block: add ioprio_check_cap function
2018-05-31 10:50:54 -04:00
BACKPORT: FROMLIST: Update Inline Encryption from v5 to v6 of patch series
2020-01-13 07:11:38 -08:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ANDROID: dm: add support for passing through inline crypto support
2020-01-24 10:49:09 -08:00
block: kyber: make kyber more friendly with merging
2018-05-30 10:47:40 -06:00
BACKPORT: FROMLIST: Update Inline Encryption from v5 to v6 of patch series
2020-01-13 07:11:38 -08:00
block: mq-deadline: Fix queue restart handling
2019-10-07 18:57:19 +02:00
block: move existing elevator ops to union
2017-01-17 10:03:33 -07:00
block: sed-opal: Set MBRDone on S3 resume path if TPER is MBREnabled
2017-09-11 09:45:52 -06:00
block: fix use-after-free on gendisk
2019-05-31 06:46:18 -07:00
block: consistently use GFP_NOIO instead of __GFP_NORECLAIM
2018-05-14 08:55:18 -06:00
block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR
2019-05-31 06:46:24 -07:00
block: move dif_prepare/dif_complete functions to block layer
2018-07-30 08:27:02 -06:00
b32863f17f