Re: [PATCH ipsec-next v3] xfrm: add /proc/sys/core/net/xfrm_redact_secret
From: David Miller <davem@davemloft.net>
Date: 2020-08-20 22:42:31
From: David Miller <davem@davemloft.net>
Date: 2020-08-20 22:42:31
From: Antony Antony <redacted> Date: Thu, 20 Aug 2020 20:35:49 +0200
Redacting secret is a FIPS 140-2 requirement.
Why not control this via the kernel lockdown mode rather than making an ad-hoc API for this?