github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-11-07 06:17:02 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

ext4: refuse encryption when block size > page size

Browse Source 
Encryption is not supported when a filesystem's block size is larger
than the page size, and commit 709f0f1f1b ("ext4: add checks for
large folio incompatibilities when BS > PS") added a check to refuse
mounting such a filesystem.

However, it is also possible to enable the "encrypt" feature on a
filesystem that is already mounted (with tune2fs -O encrypt). Once
that happens it won't be possible to mount the filesystem again in
the future, but there is nothing preventing the user from setting an
encryption policy while the filesystem is still mounted.

Fix this by refusing to set an fscrypt context in ext4_set_context()
when the block size is larger than the page size.

Fixes: 709f0f1f1b ("ext4: add checks for large folio incompatibilities when BS > PS")
Cc: stable@vger.kernel.org # v6.19+
Signed-off-by: Alberto Garcia <berto@igalia.com>
Reviewed-by: Baokun Li <libaokun@linux.alibaba.com>
Reviewed-by: Eric Biggers <ebiggers@kernel.org>
Link: https://patch.msgid.link/093b40e9df29fc102907092f4ff73461f4cfcbfd.1790343958.git.berto@igalia.com
Signed-off-by: Eric Biggers <ebiggers@kernel.org>
This commit is contained in:
Alberto Garcia 2026-09-25 16:19:18 +02:00 committed by Eric Biggers
parent cf66375465
commit 0e341d1d29
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
fs/ext4/crypto.c
View File

@ -156,6 +156,15 @@ static int ext4_set_context(struct inode *inode, const void *ctx, size_t len,
if (ext4_test_inode_flag(inode, EXT4_INODE_DAX))
return -EOPNOTSUPP;
/*
* Encryption is not supported when the block size is larger
* than the page size. This is rejected at mount time by
* ext4_check_large_folio(), and this check here is for the case
* when the 'encrypt' feature is enabled on a mounted filesystem.
*/
if (inode->i_sb->s_blocksize > PAGE_SIZE)
return -EOPNOTSUPP;
res = ext4_convert_inline_data(inode);
if (res)
return res;