Re: [PATCH] crypto: af_alg - Add af_alg_restrict sysctl, defaulting to 1
Eric Biggers <[email protected]> Tue, 23 Jun 2026 09:52:08 -0700
| Newsgroups | dev.linux.lists.iwd,org.kernel.vger.linux-bluetooth,org.kernel.vger.linux-crypto,org.kernel.vger.linux-doc,org.kernel.vger.linux-hardening,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <20260623165208.GB1793@sol> |
On Tue, Jun 23, 2026 at 11:04:14AM -0400, Luiz Augusto von Dentz wrote: > > +=== ================================================================== > > +0 AF_ALG is unrestricted. > > + > > +1 AF_ALG is supported with a limited list of algorithms. The list > > + is designed for compatibility with known users such as iwd and > > + bluez that haven't yet been fixed to use userspace crypto code. > > Is the expectation that we go shopping for userspace crypto here? Yes, same as what 99% of userspace already does. Probably you'll just want to link to OpenSSL, but it could be something else if you want. - Eric