[Devel] [PATCH rh7 0/6] crypto: make crypto netlink sockets working inside Containers

Konstantin Khorenko khorenko at virtuozzo.com
Thu Jun 15 19:51:26 MSK 2023


The trigger for this patchset is the inability to build rpm from RHEL9.2
kernel in RHEL9.2-based Container on Virtuozzo 7 node.

To be more precise modern "sha512hmac" fails to work because now it
desires to work through netlink.

This patchset does the magic and it works. :)

TODO:
 * we probably need to send the patch about alias for crypto_user module
   to mainstream: if the code is compiled as a module, ms kernel should
   fail to autoload it (to be prooved yet)
 * need to send a patchset for vz9 as well (only missing patches of course)


Herbert Xu (1):
  ms/crypto: user - Allow get request with empty driver name

Konstantin Khorenko (3):
  ve/kmod: allow NETLINK_CRYPTO sockets to autoload crypto_user module
  ve/kmod/crypto: add alias net-pf-16-proto-21 for crypto_user module
  ve/net: allow AF_ALG sockets inside a Container

Matthias-Christian Ott (1):
  ms/crypto: user - Allow CRYPTO_MSG_GETALG without CAP_NET_ADMIN

Ondrej Mosnacek (1):
  ms/crypto: user - make NETLINK_CRYPTO work inside netns

 crypto/crypto_user.c        | 55 ++++++++++++++++++++++++-------------
 include/net/net_namespace.h |  3 ++
 kernel/kmod.c               |  1 +
 kernel/ve/ve.c              |  1 +
 4 files changed, 41 insertions(+), 19 deletions(-)

-- 
2.24.3



More information about the Devel mailing list