Files
cryptsetup/man
Ondrej Kozina 4cecfbeab5 opal: add support for SUM OPAL2 feature.
For devices supporting SUM (Single User Mode) OPAL2 feature
this patch enables the SUM feature by default on OPAL2
activation during luksFormat.

SUM aims to improve isolation and tightens access to specific
Locking Range user data (hw-opal data segment) by limiting access
to Lock/Unlock and Enable/Disable permissions only to User authority
associated with the locking range.

For example Admin1 authority can no longer unlock/disable SUM locking
range and access plaintext data stored in it. It can only erase it
via Erase method.
2025-12-05 14:02:09 +01:00
..