diff options
| author | Sachin Prabhu <sprabhu@redhat.com> | 2017-01-18 15:35:57 +0530 |
|---|---|---|
| committer | Steve French <smfrench@gmail.com> | 2017-03-02 23:13:37 -0600 |
| commit | ef65aaede23f75977af56a8c330bb9be8c6e125c (patch) | |
| tree | 6c7c8bc54081d74d2e4e579639af6f4f528eaf50 /fs/cifs/sess.c | |
| parent | 284316dd42a2027afe37df34c5199eb4eabed8fd (diff) | |
| download | linux-ef65aaede23f75977af56a8c330bb9be8c6e125c.tar.gz linux-ef65aaede23f75977af56a8c330bb9be8c6e125c.tar.bz2 linux-ef65aaede23f75977af56a8c330bb9be8c6e125c.zip | |
smb2: Enforce sec= mount option
If the security type specified using a mount option is not supported,
the SMB2 session setup code changes the security type to RawNTLMSSP. We
should instead fail the mount and return an error.
The patch changes the code for SMB2 to make it similar to the code used
for SMB1. Like in SMB1, we now use the global security flags to select
the security method to be used when no security method is specified and
to return an error when the requested auth method is not available.
For SMB2, we also use ntlmv2 as a synonym for nltmssp.
Signed-off-by: Sachin Prabhu <sprabhu@redhat.com>
Acked-by: Pavel Shilovsky <pshilov@microsoft.com>
Acked-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Steve French <smfrench@gmail.com>
Diffstat (limited to 'fs/cifs/sess.c')
| -rw-r--r-- | fs/cifs/sess.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/fs/cifs/sess.c b/fs/cifs/sess.c index dcbcc927399a..8b0502cd39af 100644 --- a/fs/cifs/sess.c +++ b/fs/cifs/sess.c @@ -498,7 +498,7 @@ setup_ntlmv2_ret: } enum securityEnum -select_sectype(struct TCP_Server_Info *server, enum securityEnum requested) +cifs_select_sectype(struct TCP_Server_Info *server, enum securityEnum requested) { switch (server->negflavor) { case CIFS_NEGFLAVOR_EXTENDED: @@ -1391,7 +1391,7 @@ static int select_sec(struct cifs_ses *ses, struct sess_data *sess_data) { int type; - type = select_sectype(ses->server, ses->sectype); + type = cifs_select_sectype(ses->server, ses->sectype); cifs_dbg(FYI, "sess setup type %d\n", type); if (type == Unspecified) { cifs_dbg(VFS, |