eCryptfs: Filename encryption only supports password auth tokens

Returns -ENOTSUPP when attempting to use filename encryption with
something other than a password authentication token, such as a private
token from openssl.  Using filename encryption with a userspace eCryptfs
key module is a future goal.  Until then, this patch handles the
situation a little better than simply using a BUG_ON().

Acked-by: Serge Hallyn <serue@us.ibm.com>
Cc: ecryptfs-devel@lists.launchpad.net
Cc: stable <stable@kernel.org>
Signed-off-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com>

1 files changed, 12 insertions, 2 deletions

diff --git a/fs/ecryptfs/keystore.c b/fs/ecryptfs/keystore.c
index 3a61f056acf6..17164e483ab1 100644
--- a/fs/ecryptfs/keystore.c
+++ b/fs/ecryptfs/keystore.c
@@ -612,7 +612,12 @@ ecryptfs_write_tag_70_packet(char *dest, size_t *remaining_bytes,
         }
         /* TODO: Support other key modules than passphrase for
          * filename encryption */
-        BUG_ON(s->auth_tok->token_type != ECRYPTFS_PASSWORD);
+        if (s->auth_tok->token_type != ECRYPTFS_PASSWORD) {
+                rc = -EOPNOTSUPP;
+                printk(KERN_INFO "%s: Filename encryption only supports "
+                       "password tokens\n", __func__);
+                goto out_free_unlock;
+        }
         sg_init_one(
                 &s->hash_sg,
                 (u8 *)s->auth_tok->token.password.session_key_encryption_key,
@@ -910,7 +915,12 @@ ecryptfs_parse_tag_70_packet(char **filename, size_t *filename_size,
         }
         /* TODO: Support other key modules than passphrase for
          * filename encryption */
-        BUG_ON(s->auth_tok->token_type != ECRYPTFS_PASSWORD);
+        if (s->auth_tok->token_type != ECRYPTFS_PASSWORD) {
+                rc = -EOPNOTSUPP;
+                printk(KERN_INFO "%s: Filename encryption only supports "
+                       "password tokens\n", __func__);
+                goto out_free_unlock;
+        }
         rc = crypto_blkcipher_setkey(
                 s->desc.tfm,
                 s->auth_tok->token.password.session_key_encryption_key,