ksmbd: add per-share SMB3 encryption enforcement

Browse source

Add a share flag for requiring SMB3 encryption on an individual share.

Advertise SMB2_SHAREFLAG_ENCRYPT_DATA in TREE_CONNECT responses and
reject both unencrypted TREE_CONNECT attempts and plaintext requests for
shares carrying the flag.

Keep BIT(19) reserved for the existing ksmbd-tools WIDE_LINKS flag and
use BIT(20) for the new netlink ABI flag.

Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>

...

This commit is contained in:

Namjae Jeon 2026-08-16 09:33:41 +09:00

parent abe5acb342

commit 50a400cff5

5 changed files with 34 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

fs/smb/common/smb2pdu.h

View file

2

fs/smb/server/ksmbd_netlink.h

View file

1

fs/smb/server/mgmt/share_config.c

View file

11

fs/smb/server/server.c

View file

22

fs/smb/server/smb2pdu.c

View file