[19.04 FEAT] Extended access controls for AP queue - kernel part

[bugproxy]

Update description:
Provide a means to control which user/process can access which APQN, or in other words enable to grant users/applications access to different (sets of) crypto adapters and domains.
While keeping existing interfaces for compatibility, allow to use both DAC (e.g. Unix file permissions) and MAC (e.g. LSM) methods.

Please enable the following kernel config option:
   * CONFIG_ZCRYPT_MULTIDEVNODES=y

will be made available with kernel 4.20

[Frank Heimes (fheimes)]

Waiting with assignment until disco reached it's target kernel level of 4.20+ - just monitored for now ...

[bugproxy (bugproxy)]

------- Comment From <email address hidden> 2019-02-01 07:46 EDT-------
git commit: kernel 4.20 [00fab2350e]

[Seth Forshee (sforshee)]

Can this bug be made public?

[bugproxy (bugproxy)]

------- Comment From <email address hidden> 2019-02-19 03:45 EDT-------
This information is already available with kernel 4.20, therefore can be made public....

[Seth Forshee (sforshee)]

We already have this option turned on in our 5.0 tree. I've marked this as an enforced option in our annotations to ensure it is not accidentally turned off and added a note referring to this bug.

[Frank Heimes (fheimes)]

Just verified that commit "s390/zcrypt: multiple zcrypt device nodes support" landed in disco-proposed kernel "Ubuntu-5.0.0-7.8" (as "00fab23"). And config option CONFIG_ZCRYPT_MULTIDEVNODES is properly enabled - looks good.

[Frank Heimes (fheimes)]

Since Kernel 5.0 landed in disco's release pocket today, I'm changing the status to Fix Released.

[bugproxy (bugproxy)]

------- Comment From <email address hidden> 2019-03-15 06:28 EDT-------
IBM Bugzilla status -> closed, Fix Released for disco