From: "Uwe Kleine-König" <u.kleine-koenig@pengutronix.de>
To: Trond Myklebust <Trond.Myklebust@netapp.com>
Cc: Randy Dunlap <randy.dunlap@oracle.com>,
Linus Torvalds <torvalds@linux-foundation.org>,
linux-kernel@vger.kernel.org,
"J. Bruce Fields" <bfields@fieldses.org>
Subject: Re: [REGRESSION PATCH] NFS: let NFS_V4 and NFSD_V4 enforce CRYPTO
Date: Thu, 9 Sep 2010 20:14:54 +0200 [thread overview]
Message-ID: <20100909181454.GB14915@pengutronix.de> (raw)
In-Reply-To: <1284051448.6977.6.camel@heimdal.trondhjem.org>
Hi Trond,
On Thu, Sep 09, 2010 at 12:57:28PM -0400, Trond Myklebust wrote:
> On Wed, 2010-08-25 at 11:05 +0200, Uwe Kleine-König wrote:
> > This is a follow up to
> >
> > df486a2 (NFS: Fix the selection of security flavours in Kconfig)
> >
> > which broke (among others) arm/mx1_defconfig.
> >
> > Moreover let NFS_V4 select RPCSEC_GSS_KRB5 again as it was before
> > df486a2. This make the dependency more explicit than relying on the no
> > prompt + default y if !(NFS_V4 || NFSD_V4).
> Having looked more closely at the actual dependencies in the NFSv4
> client and server (see the changelog below), I believe the following is
> the correct patch. It ensures that the RPCSEC_GSS module is always
> selected, and does not introduce any unnecessary dependencies on CRYPTO.
Fine, works for me. That's even better than selecting CRYPTO.
Still, wouldn't be the patch below more complete?
Best regards
Uwe
diff --git a/fs/nfs/Kconfig b/fs/nfs/Kconfig
index 6c2aad4..f7e13db 100644
--- a/fs/nfs/Kconfig
+++ b/fs/nfs/Kconfig
@@ -63,6 +63,7 @@ config NFS_V3_ACL
config NFS_V4
bool "NFS client support for NFS version 4"
depends on NFS_FS
+ select SUNRPC_GSS
help
This option enables support for version 4 of the NFS protocol
(RFC 3530) in the kernel's NFS client.
diff --git a/fs/nfsd/Kconfig b/fs/nfsd/Kconfig
index 95932f5..4264377 100644
--- a/fs/nfsd/Kconfig
+++ b/fs/nfsd/Kconfig
@@ -69,6 +69,7 @@ config NFSD_V4
depends on NFSD && PROC_FS && EXPERIMENTAL
select NFSD_V3
select FS_POSIX_ACL
+ select SUNRPC_GSS
help
This option enables support in your system's NFS server for
version 4 of the NFS protocol (RFC 3530).
diff --git a/net/sunrpc/Kconfig b/net/sunrpc/Kconfig
index 3376d76..442efe1 100644
--- a/net/sunrpc/Kconfig
+++ b/net/sunrpc/Kconfig
@@ -20,8 +20,7 @@ config SUNRPC_XPRT_RDMA
config RPCSEC_GSS_KRB5
tristate
depends on SUNRPC && CRYPTO
- prompt "Secure RPC: Kerberos V mechanism" if !(NFS_V4 || NFSD_V4)
- default y
+ prompt "Secure RPC: Kerberos V mechanism"
select SUNRPC_GSS
select CRYPTO_MD5
select CRYPTO_DES
--
Pengutronix e.K. | Uwe Kleine-König |
Industrial Linux Solutions | http://www.pengutronix.de/ |
next prev parent reply other threads:[~2010-09-09 18:15 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-08-25 8:49 df486a25900 broke arm/mx1_defconfig and probably more Uwe Kleine-König
2010-08-25 9:05 ` [REGRESSION PATCH] NFS: let NFS_V4 and NFSD_V4 enforce CRYPTO Uwe Kleine-König
2010-08-27 6:11 ` Uwe Kleine-König
2010-08-30 8:26 ` Uwe Kleine-König
2010-08-30 10:36 ` Neil Brown
2010-08-30 12:10 ` Uwe Kleine-König
2010-08-30 12:33 ` Uwe Kleine-König
2010-08-30 13:50 ` Trond Myklebust
2010-08-30 14:36 ` Uwe Kleine-König
2010-09-01 8:52 ` [REGRESSION PATCH v2] " Uwe Kleine-König
2010-09-01 13:17 ` Trond Myklebust
2010-09-01 13:50 ` Uwe Kleine-König
2010-09-03 20:24 ` Uwe Kleine-König
2010-09-09 16:57 ` [REGRESSION PATCH] " Trond Myklebust
2010-09-09 18:14 ` Uwe Kleine-König [this message]
2010-09-27 10:41 ` [PATCH] sunrpc: prompt for RPCSEC_GSS_KRB5 even if NFS_V4 is enabled Uwe Kleine-König
2010-09-27 11:39 ` Trond Myklebust
2010-09-27 12:54 ` Uwe Kleine-König
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20100909181454.GB14915@pengutronix.de \
--to=u.kleine-koenig@pengutronix.de \
--cc=Trond.Myklebust@netapp.com \
--cc=bfields@fieldses.org \
--cc=linux-kernel@vger.kernel.org \
--cc=randy.dunlap@oracle.com \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®