mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2026-01-15 02:16:40 -05:00
nvme-auth: clear sensitive info right after authentication completes
We don't want to keep authentication sensitive info in memory for unlimited amount of time. Reviewed-by: Hannes Reinecke <hare@suse.de> Signed-off-by: Sagi Grimberg <sagi@grimberg.me> Reviewed-by: Chaitanya Kulkarni <kch@nvidia.com> Signed-off-by: Christoph Hellwig <hch@lst.de>
This commit is contained in:
committed by
Christoph Hellwig
parent
e481fc0a37
commit
8d1c1904e9
@@ -912,6 +912,8 @@ int nvme_auth_wait(struct nvme_ctrl *ctrl, int qid)
|
||||
mutex_unlock(&ctrl->dhchap_auth_mutex);
|
||||
flush_work(&chap->auth_work);
|
||||
ret = chap->error;
|
||||
/* clear sensitive info */
|
||||
nvme_auth_reset_dhchap(chap);
|
||||
return ret;
|
||||
}
|
||||
mutex_unlock(&ctrl->dhchap_auth_mutex);
|
||||
|
||||
Reference in New Issue
Block a user