Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

Fedora 45 Looks To Begin Phasing Out In-Kernel Crypto Userspace API

Дата публикации: 24-07-2026 13:58:06

Going along with the upstream Linux 7.2 kernel deprecation of AF_ALG and Linux 7.3 to further restrict this interface for letting user-space programs interact directly with the Linux kernel crypto API, Fedora 45 is looking to follow and help support this transition...

Основное содержимое страницы с новостью.

FEDORA

Going along with the upstream Linux 7.2 kernel deprecation of AF_ALG and Linux 7.3 to further restrict this interface for letting user-space programs interact directly with the Linux kernel crypto API, Fedora 45 is looking to follow and help support this transition.

A change proposal was filed as the first phase of disabling the in-kernel crypto user-space API for Fedora Linux. With the upstream Linux kernel moving toward the elimination of AF_ALG / CRYPTO_USER_API, Fedora 45 is looking to honor it too but at the same time ensuring existing user-space software will not suddenly break.

As for Fedora's known users of the in-kernel crypto user-space API and for the plans with Fedora 45:

"The known Fedora users of the Crypto Userspace API are iwd, cryptsetup (just used for TrueCrypt, tcplay, or VeraCrypt and some kernel level benchmarking) and libkcapi (used by dracut, kernel build process). These users are unaffected by this phase of the change. The cryptsetup already has the ability to fall back to other mechanisms. The iwd users will continue to function but users likely should migrate to wpa_supplicant (the iwd package is currently unmaintained upstream).

The first phase uses the upstream patches due to land shortly, likely in 7.3, to limit the use of the API to the known apps and restricts the use. This allows Fedora to identify unknown users and gracefully deal with them before the active demise of the interface upstream providing users a more graceful process rather than universally pulling the rug without any notice."

More details for those interested can be found via the change proposal. It still needs to be voted on by the Fedora Engineering and Steering Committee (FESCo) but given the upstream kernel deprecation, it's a pretty safe bet the change proposal will proceed for Fedora 45.

Separately, sad that IWD development is on hiatus and the Fedora change proposal being another indicator of IWD being "currently unmaintained upstream."

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1Fedora 45 Atomic Desktops Look To Allow For Web-Based Remote Installations013.3123-07-2026
2Linux 7.2-rc5 Released: "Once More We Have Quite A Massive -rc5"010.8626-07-2026
3Linux 7.2-rc5 Fixing Longstanding Bug In IPv4 Networking Over Firewire010.3226-07-2026
4Qualcomm QCE Driver On The Chopping Block With ~48x Slower Than Armv8 Crypto Extensions07.5424-07-2026
5Fedora Working To Establish Conflict of Interest Policy05.6325-07-2026
6"KVM Chainsaw" Expected To Hit Linux 7.3 For Dealing With God Data Structure09.826-07-2026
7Debian Considering General Resolution Over LLM Usage In The Project05.524-07-2026
8На kernel.org по ошибке удалили со всех зеркал архивы с кодом ядра0502-07-2026
9User Frustrations Over The "Tragic State of FreeBSD Audio/Sound" Support04.2526-07-2026
10Imagination PowerVR Driver Marking BXM-4-64 MC1 GPU As Supported In Linux 7.3017.5524-07-2026

Классификация: Мнения. Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 14.24. Источник: www.phoronix.com.