Barani Muthukumaran
0dccdc03e0
ANDROID: dm: Add wrapped key support in dm-default-key ...
To prevent keys from being compromised if an attacker acquires read
access to kernel memory, some inline encryption hardware supports
protecting the keys in hardware without software having access to or the
ability to set the plaintext keys. Instead, software only sees "wrapped
keys", which may differ on every boot. The keys can be initially
generated either by software (in which case they need to be imported to
hardware to be wrapped), or directly by the hardware.
Add support for this type of hardware by allowing keys to be flagged as
hardware-wrapped. When used, dm-default-key will pass the wrapped key
to the inline encryption hardware to encryption metadata. The hardware
will internally unwrap the key and derive the metadata encryption key.
Bug: 147209885
Test: Validate metadata encryption & FBE with wrapped keys.
Change-Id: I8078b116dab9e04d7f3f15f29f11823185ea5d50
Signed-off-by: Barani Muthukumaran <bmuthuku@codeaurora.org>
2020-02-25 19:28:24 +00:00
bcache: properly initialize 'path' and 'err' in register_bcache()
2020-02-24 08:37:03 +01:00
dm space map common: fix to ensure new block isn't already in use
2020-02-11 04:35:26 -08:00
ANDROID: dm: enable may_passthrough_inline_crypto on some targets
2020-01-24 10:52:54 -08:00
dm bufio: introduce a global cache replacement
2019-09-13 17:00:21 -04:00
dm cache: fix bugs when a GFP_NOWAIT allocation fails
2019-10-17 11:13:50 -04:00
dm clone metadata: Use a two phase commit
2019-12-21 11:05:00 +01:00
dm clone metadata: Use a two phase commit
2019-12-21 11:05:00 +01:00
dm clone: Flush destination device before committing metadata
2019-12-21 11:05:01 +01:00
dm crypt: fix benbi IV constructor crash if used in authenticated mode
2020-02-11 04:35:26 -08:00
ANDROID: dm: Add wrapped key support in dm-default-key
2020-02-25 19:28:24 +00:00
dm delay: fix a crash when invalid device is specified
2019-04-26 11:29:32 -04:00
dm dust: use dust block size for badblocklist index
2019-08-21 11:27:17 -04:00
treewide: Add SPDX license identifier for more missed files
2019-05-21 10:50:45 +02:00
- Improve DM snapshot target's scalability by using finer grained
2019-05-16 15:55:48 -07:00
block: rework zone reporting
2020-01-07 16:02:47 -08:00
docs: device-mapper: move it to the admin-guide
2019-07-15 11:03:01 -03:00
block: centralize PI remapping logic to the block layer
2019-09-17 20:03:49 -06:00
dm: introduce DM_GET_TARGET_VERSION
2019-09-16 10:18:01 -04:00
dm kcopyd: always complete failed jobs
2019-08-15 15:57:39 -04:00
ANDROID: dm: enable may_passthrough_inline_crypto on some targets
2020-01-24 10:52:54 -08:00
dm log writes: fix incorrect comment about the logged sequence example
2019-07-09 14:13:33 -04:00
dm mpath: remove harmful bio-based optimization
2019-12-21 11:04:56 +01:00
dm raid: fix updating of max_discard_sectors limit
2019-09-11 16:18:23 -04:00
dm raid1: use struct_size() with kzalloc()
2019-08-26 11:05:32 -04:00
block: Delay default elevator initialization
2019-09-05 19:52:34 -06:00
block: fix an integer overflow in logical block size
2020-01-23 08:22:32 +01:00
dm snapshot: rework COW throttling to fix deadlock
2019-10-10 09:46:05 -04:00
dm stats: use struct_size() helper
2019-09-04 09:39:22 -04:00
ANDROID: dm: add support for passing through inline crypto support
2020-01-24 10:52:54 -08:00
dm mpath: fix missing call of path selector type->end_io
2019-04-25 15:38:52 -04:00
dm thin metadata: use pool locking at end of dm_pool_metadata_close
2020-02-11 04:35:26 -08:00
dm thin metadata: Add support for a pre-commit callback
2019-12-21 11:05:01 +01:00
dm thin: don't allow changing data device during thin-pool reload
2020-02-24 08:36:49 +01:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
ANDROID: AVB error handler to invalidate vbmeta partition.
2019-05-03 10:40:05 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
Merge 5.4-rc1-prereleae into android-mainline
2019-09-23 14:14:08 +02:00
dm verity: add root hash pkcs#7 signature verification
2019-08-23 10:13:14 -04:00
dm verity: add root hash pkcs#7 signature verification
2019-08-23 10:13:14 -04:00
Merge 5.4-rc1-prereleae into android-mainline
2019-09-23 14:14:08 +02:00
dm writecache: fix incorrect flush sequence when doing SSD mode commit
2020-02-11 04:35:26 -08:00
This is the 5.4.19 stable release
2020-02-11 14:09:41 -08:00
dm zoned: reduce overhead of backing device checks
2019-12-17 19:56:12 +01:00
Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-5.4.y' into android-5.4
2020-01-15 16:41:51 -08:00
dm zoned: reduce overhead of backing device checks
2019-12-17 19:56:12 +01:00
ANDROID: dm: add support for passing through derive_raw_secret
2020-02-25 19:28:10 +00:00
dm: make dm_table_find_target return NULL
2019-08-23 10:13:12 -04:00
ANDROID: dm: prevent default-key from being enabled without needed hooks
2020-02-10 23:29:40 +00:00
ANDROID: dm: add dm-default-key target for metadata encryption
2020-01-24 10:52:54 -08:00
md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit
2019-12-31 16:44:20 +01:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 45
2019-05-24 17:27:12 +02:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 47
2019-05-24 17:27:13 +02:00
md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
2019-12-17 19:56:14 +01:00
md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
2019-12-17 19:56:14 +01:00
md: make sure desc_nr less than MD_SB_DISKS
2020-01-04 19:18:34 +01:00
md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
2019-12-17 19:56:14 +01:00
block: fix an integer overflow in logical block size
2020-01-23 08:22:32 +01:00
md/raid0: avoid RAID0 data corruption due to layout confusion.
2019-09-13 13:10:05 -07:00
md: raid1-10: Unify r{1,10}bio_pool_free
2019-06-15 01:37:35 -06:00
md: raid1: check rdev before reference in raid1_sync_request func
2020-01-09 10:19:48 +01:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 288
2019-06-05 17:36:37 +02:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 288
2019-06-05 17:36:37 +02:00
raid5: need to set STRIPE_HANDLE for batch head
2020-01-09 10:19:48 +01:00
raid5: use bio_end_sector in r5_next_bio
2019-09-13 13:14:43 -07:00
md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
2019-12-17 19:56:14 +01:00
0dccdc03e0