eCryptfs: allow userspace messaging to be disabled
When the userspace messaging (for the less common case of userspace key wrap/unwrap via ecryptfsd) is not needed, allow eCryptfs to build with it removed. This saves on kernel code size and reduces potential attack surface by removing the /dev/ecryptfs node. Signed-off-by:Kees Cook <keescook@chromium.org> Signed-off-by:
Tyler Hicks <tyhicks@canonical.com>
Showing
- fs/ecryptfs/Kconfig 8 additions, 0 deletionsfs/ecryptfs/Kconfig
- fs/ecryptfs/Makefile 5 additions, 2 deletionsfs/ecryptfs/Makefile
- fs/ecryptfs/ecryptfs_kernel.h 38 additions, 2 deletionsfs/ecryptfs/ecryptfs_kernel.h
- fs/ecryptfs/keystore.c 2 additions, 2 deletionsfs/ecryptfs/keystore.c
- include/linux/ecryptfs.h 2 additions, 10 deletionsinclude/linux/ecryptfs.h
Loading
Please register or sign in to comment