• Jeff Layton's avatar
    nfsd: new Kconfig option for legacy client tracking · 74fd4873
    Jeff Layton authored
    We've had a number of attempts at different NFSv4 client tracking
    methods over the years, but now nfsdcld has emerged as the clear winner
    since the others (recoverydir and the usermodehelper upcall) are
    problematic.
    
    As a case in point, the recoverydir backend uses MD5 hashes to encode
    long form clientid strings, which means that nfsd repeatedly gets dinged
    on FIPS audits, since MD5 isn't considered secure. Its use of MD5 is not
    cryptographically significant, so there is no danger there, but allowing
    us to compile that out allows us to sidestep the issue entirely.
    
    As a prelude to eventually removing support for these client tracking
    methods, add a new Kconfig option that enables them. Mark it deprecated
    and make it default to N.
    Acked-by: default avatarNeilBrown <neilb@suse.de>
    Signed-off-by: default avatarJeff Layton <jlayton@kernel.org>
    Signed-off-by: default avatarChuck Lever <chuck.lever@oracle.com>
    74fd4873
Kconfig 5.95 KB