[Devel] [PATCH rh7 0/6] crypto: make crypto netlink sockets working inside Containers
Konstantin Khorenko
khorenko at virtuozzo.com
Thu Jun 15 19:51:26 MSK 2023
The trigger for this patchset is the inability to build rpm from RHEL9.2
kernel in RHEL9.2-based Container on Virtuozzo 7 node.
To be more precise modern "sha512hmac" fails to work because now it
desires to work through netlink.
This patchset does the magic and it works. :)
TODO:
* we probably need to send the patch about alias for crypto_user module
to mainstream: if the code is compiled as a module, ms kernel should
fail to autoload it (to be prooved yet)
* need to send a patchset for vz9 as well (only missing patches of course)
Herbert Xu (1):
ms/crypto: user - Allow get request with empty driver name
Konstantin Khorenko (3):
ve/kmod: allow NETLINK_CRYPTO sockets to autoload crypto_user module
ve/kmod/crypto: add alias net-pf-16-proto-21 for crypto_user module
ve/net: allow AF_ALG sockets inside a Container
Matthias-Christian Ott (1):
ms/crypto: user - Allow CRYPTO_MSG_GETALG without CAP_NET_ADMIN
Ondrej Mosnacek (1):
ms/crypto: user - make NETLINK_CRYPTO work inside netns
crypto/crypto_user.c | 55 ++++++++++++++++++++++++-------------
include/net/net_namespace.h | 3 ++
kernel/kmod.c | 1 +
kernel/ve/ve.c | 1 +
4 files changed, 41 insertions(+), 19 deletions(-)
--
2.24.3
More information about the Devel
mailing list