Minki/linux
1
0
Fork 1
mirror of https://github.com/torvalds/linux.git synced 2024-12-30 14:52:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

fscrypt: update comment for do_remove_key()

Browse Source 
Adjust a comment that was missed during commit 15baf55481
("fscrypt: track master key presence separately from secret").

Link: https://lore.kernel.org/r/20231206002127.14790-1-ebiggers@kernel.org
Signed-off-by: Eric Biggers <ebiggers@google.com>
This commit is contained in:
Eric Biggers 2023-12-05 16:21:27 -08:00
parent 33318c0e6b
commit 0fc24a6549
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
fs/crypto/keyring.c
View File

@ -1002,9 +1002,9 @@ static int try_to_lock_encrypted_files(struct super_block *sb,
* FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS (all_users=true) always removes the * FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS (all_users=true) always removes the
* key itself. * key itself.
* *
* To "remove the key itself", first we wipe the actual master key secret, so * To "remove the key itself", first we transition the key to the "incompletely
* that no more inodes can be unlocked with it. Then we try to evict all cached * removed" state, so that no more inodes can be unlocked with it. Then we try
* inodes that had been unlocked with the key. * to evict all cached inodes that had been unlocked with the key.
* *
* If all inodes were evicted, then we unlink the fscrypt_master_key from the * If all inodes were evicted, then we unlink the fscrypt_master_key from the
* keyring. Otherwise it remains in the keyring in the "incompletely removed" * keyring. Otherwise it remains in the keyring in the "incompletely removed"