Going along with the upstream Linux 7.2 kernel deprecation of AF_ALG and Linux 7.3 to further restrict this interface for letting user-space programs interact directly with the Linux kernel crypto API, Fedora 45 is looking to follow and help support this transition...

Going along with the upstream Linux 7.2 kernel deprecation of AF_ALG and Linux 7.3 to further restrict this interface for letting user-space programs interact directly with the Linux kernel crypto API, Fedora 45 is looking to follow and help support this transition.
A change proposal was filed as the first phase of disabling the in-kernel crypto user-space API for Fedora Linux. With the upstream Linux kernel moving toward the elimination of AF_ALG / CRYPTO_USER_API, Fedora 45 is looking to honor it too but at the same time ensuring existing user-space software will not suddenly break.
As for Fedora's known users of the in-kernel crypto user-space API and for the plans with Fedora 45:
"The known Fedora users of the Crypto Userspace API are iwd, cryptsetup (just used for TrueCrypt, tcplay, or VeraCrypt and some kernel level benchmarking) and libkcapi (used by dracut, kernel build process). These users are unaffected by this phase of the change. The cryptsetup already has the ability to fall back to other mechanisms. The iwd users will continue to function but users likely should migrate to wpa_supplicant (the iwd package is currently unmaintained upstream).The first phase uses the upstream patches due to land shortly, likely in 7.3, to limit the use of the API to the known apps and restricts the use. This allows Fedora to identify unknown users and gracefully deal with them before the active demise of the interface upstream providing users a more graceful process rather than universally pulling the rug without any notice."
More details for those interested can be found via the change proposal. It still needs to be voted on by the Fedora Engineering and Steering Committee (FESCo) but given the upstream kernel deprecation, it's a pretty safe bet the change proposal will proceed for Fedora 45.
Separately, sad that IWD development is on hiatus and the Fedora change proposal being another indicator of IWD being "currently unmaintained upstream."
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | Fedora 45 Atomic Desktops Look To Allow For Web-Based Remote Installations | 0 | 13.31 | 23-07-2026 |
| 2 | Linux 7.2-rc5 Released: "Once More We Have Quite A Massive -rc5" | 0 | 10.86 | 26-07-2026 |
| 3 | Linux 7.2-rc5 Fixing Longstanding Bug In IPv4 Networking Over Firewire | 0 | 10.32 | 26-07-2026 |
| 4 | Qualcomm QCE Driver On The Chopping Block With ~48x Slower Than Armv8 Crypto Extensions | 0 | 7.54 | 24-07-2026 |
| 5 | Fedora Working To Establish Conflict of Interest Policy | 0 | 5.63 | 25-07-2026 |
| 6 | "KVM Chainsaw" Expected To Hit Linux 7.3 For Dealing With God Data Structure | 0 | 9.8 | 26-07-2026 |
| 7 | Debian Considering General Resolution Over LLM Usage In The Project | 0 | 5.5 | 24-07-2026 |
| 8 | На kernel.org по ошибке удалили со всех зеркал архивы с кодом ядра | 0 | 5 | 02-07-2026 |
| 9 | User Frustrations Over The "Tragic State of FreeBSD Audio/Sound" Support | 0 | 4.25 | 26-07-2026 |
| 10 | Imagination PowerVR Driver Marking BXM-4-64 MC1 GPU As Supported In Linux 7.3 | 0 | 17.55 | 24-07-2026 |