Ilya Dryomov b66e312656 libceph: verify authorize reply on connect ...

commit 5c056fdc5b upstream.

After sending an authorizer (ceph_x_authorize_a + ceph_x_authorize_b),
the client gets back a ceph_x_authorize_reply, which it is supposed to
verify to ensure the authenticity and protect against replay attacks.
The code for doing this is there (ceph_x_verify_authorizer_reply(),
ceph_auth_verify_authorizer_reply() + plumbing), but it is never
invoked by the the messenger.

AFAICT this goes back to 2009, when ceph authentication protocols
support was added to the kernel client in 4e7a5dcd1b ("ceph:
negotiate authentication protocol; implement AUTH_NONE protocol").

The second param of ceph_connection_operations::verify_authorizer_reply
is unused all the way down.  Pass 0 to facilitate backporting, and kill
it in the next commit.

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: Sage Weil <sage@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-01-09 08:07:52 +01:00

..

crush

crush: sync up with userspace

2015-06-25 11:49:31 +03:00

armor.c

libceph: Fix base64-decoding when input ends in newline.

2011-03-15 09:14:02 -07:00

auth_none.c

libceph: Fix NULL pointer dereference in auth client code

2013-07-03 15:32:55 -07:00

auth_none.h

net: 8021q/bluetooth/bridge/can/ceph: Remove extern from function prototypes

2013-10-19 19:12:11 -04:00

auth_x_protocol.h

ceph: factor out libceph from Ceph file system

2010-10-20 15:37:28 -07:00

auth_x.c

libceph: add nocephx_sign_messages option

2015-11-02 23:37:46 +01:00

auth_x.h

libceph: store session key in cephx authorizer

2014-12-17 20:09:50 +03:00

auth.c

libceph: wrap auth methods in a mutex

2013-05-01 21:17:15 -07:00

buffer.c

libceph: nuke ceph_kvfree()

2014-12-17 20:09:50 +03:00

ceph_common.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

2015-11-13 09:24:40 -08:00

ceph_fs.c

ceph: fix file mode calculation

2011-07-19 11:25:04 -07:00

ceph_hash.c

net: cleanup unsigned to unsigned int

2012-04-15 12:44:40 -04:00

ceph_strings.c

libceph: nuke pool op infrastructure

2015-02-19 13:31:37 +03:00

crypto.c

KEYS: Merge the type-specific data with the payload data

2015-10-21 15:18:36 +01:00

crypto.h

libceph: introduce ceph_x_authorizer_cleanup()

2015-11-02 23:36:48 +01:00

debugfs.c

libceph: expose client options through debugfs

2015-04-20 18:55:39 +03:00

Kconfig

libceph: select CRYPTO_CBC in addition to CRYPTO_AES

2014-10-14 21:03:20 +04:00

Makefile

libceph: create source file "net/ceph/snapshot.c"

2013-05-01 21:20:08 -07:00

messenger.c

libceph: verify authorize reply on connect

2017-01-09 08:07:52 +01:00

mon_client.c

libceph: use keepalive2 to verify the mon session is alive

2015-09-08 23:14:30 +03:00

msgpool.c

libceph: initialize msgpool message types

2012-07-30 09:29:50 -07:00

osd_client.c

libceph: don't spam dmesg with stray reply warnings

2016-03-03 15:07:26 -08:00

osdmap.c

libceph: apply new_state before new_up_client on incrementals

2016-08-10 11:49:29 +02:00

pagelist.c

libceph: reference counting pagelist

2014-10-14 12:56:48 -07:00

pagevec.c

libceph: use kvfree() instead of open-coding it

2015-06-25 11:49:28 +03:00

snapshot.c

libceph: create source file "net/ceph/snapshot.c"

2013-05-01 21:20:08 -07:00