Replace HTTP links with HTTPS ones: CIFS
Rationale: Reduces attack surface on kernel devs opening the links for MITM as HTTPS traffic is much harder to manipulate. Deterministic algorithm: For each file: If not .svg: For each line: If doesn't contain `\bxmlns\b`: For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`: If both the HTTP and HTTPS versions return 200 OK and serve the same content: Replace HTTP with HTTPS. Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de> Reviewed-by: Aurelien Aptel <aaptel@suse.com> Link: https://lore.kernel.org/r/20200627103125.71828-1-grandmaster@al2klimov.de Signed-off-by: Jonathan Corbet <corbet@lwn.net>
This commit is contained in:
parent
c0ad0befed
commit
cba22b1c59
@ -98,7 +98,7 @@ x) Finish support for SMB3.1.1 compression
|
|||||||
Known Bugs
|
Known Bugs
|
||||||
==========
|
==========
|
||||||
|
|
||||||
See http://bugzilla.samba.org - search on product "CifsVFS" for
|
See https://bugzilla.samba.org - search on product "CifsVFS" for
|
||||||
current bug list. Also check http://bugzilla.kernel.org (Product = File System, Component = CIFS)
|
current bug list. Also check http://bugzilla.kernel.org (Product = File System, Component = CIFS)
|
||||||
|
|
||||||
1) existing symbolic links (Windows reparse points) are recognized but
|
1) existing symbolic links (Windows reparse points) are recognized but
|
||||||
|
@ -17,7 +17,7 @@ standard for interoperating between Macs and Windows and major NAS appliances.
|
|||||||
Please see
|
Please see
|
||||||
MS-SMB2 (for detailed SMB2/SMB3/SMB3.1.1 protocol specification)
|
MS-SMB2 (for detailed SMB2/SMB3/SMB3.1.1 protocol specification)
|
||||||
http://protocolfreedom.org/ and
|
http://protocolfreedom.org/ and
|
||||||
http://samba.org/samba/PFIF/
|
https://samba.org/samba/PFIF/
|
||||||
for more details.
|
for more details.
|
||||||
|
|
||||||
|
|
||||||
@ -32,7 +32,7 @@ Build instructions
|
|||||||
|
|
||||||
For Linux:
|
For Linux:
|
||||||
|
|
||||||
1) Download the kernel (e.g. from http://www.kernel.org)
|
1) Download the kernel (e.g. from https://www.kernel.org)
|
||||||
and change directory into the top of the kernel directory tree
|
and change directory into the top of the kernel directory tree
|
||||||
(e.g. /usr/src/linux-2.5.73)
|
(e.g. /usr/src/linux-2.5.73)
|
||||||
2) make menuconfig (or make xconfig)
|
2) make menuconfig (or make xconfig)
|
||||||
@ -831,7 +831,7 @@ the active sessions and the shares that are mounted.
|
|||||||
Enabling Kerberos (extended security) works but requires version 1.2 or later
|
Enabling Kerberos (extended security) works but requires version 1.2 or later
|
||||||
of the helper program cifs.upcall to be present and to be configured in the
|
of the helper program cifs.upcall to be present and to be configured in the
|
||||||
/etc/request-key.conf file. The cifs.upcall helper program is from the Samba
|
/etc/request-key.conf file. The cifs.upcall helper program is from the Samba
|
||||||
project(http://www.samba.org). NTLM and NTLMv2 and LANMAN support do not
|
project(https://www.samba.org). NTLM and NTLMv2 and LANMAN support do not
|
||||||
require this helper. Note that NTLMv2 security (which does not require the
|
require this helper. Note that NTLMv2 security (which does not require the
|
||||||
cifs.upcall helper program), instead of using Kerberos, is sufficient for
|
cifs.upcall helper program), instead of using Kerberos, is sufficient for
|
||||||
some use cases.
|
some use cases.
|
||||||
|
@ -16,7 +16,7 @@
|
|||||||
# GNU General Public License for more details.
|
# GNU General Public License for more details.
|
||||||
#
|
#
|
||||||
# You should have received a copy of the GNU General Public License
|
# You should have received a copy of the GNU General Public License
|
||||||
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
# along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||||
#
|
#
|
||||||
|
|
||||||
while(<>) {
|
while(<>) {
|
||||||
|
@ -49,7 +49,7 @@ static const struct cifs_sid sid_unix_groups = { 1, 1, {0, 0, 0, 0, 0, 22},
|
|||||||
{cpu_to_le32(2), 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0} };
|
{cpu_to_le32(2), 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0} };
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* See http://technet.microsoft.com/en-us/library/hh509017(v=ws.10).aspx
|
* See https://technet.microsoft.com/en-us/library/hh509017(v=ws.10).aspx
|
||||||
*/
|
*/
|
||||||
|
|
||||||
/* S-1-5-88 MS NFS and Apple style UID/GID/mode */
|
/* S-1-5-88 MS NFS and Apple style UID/GID/mode */
|
||||||
@ -825,7 +825,7 @@ unsigned int setup_authusers_ACE(struct cifs_ace *pntace)
|
|||||||
|
|
||||||
/*
|
/*
|
||||||
* Fill in the special SID based on the mode. See
|
* Fill in the special SID based on the mode. See
|
||||||
* http://technet.microsoft.com/en-us/library/hh509017(v=ws.10).aspx
|
* https://technet.microsoft.com/en-us/library/hh509017(v=ws.10).aspx
|
||||||
*/
|
*/
|
||||||
unsigned int setup_special_mode_ACE(struct cifs_ace *pntace, __u64 nmode)
|
unsigned int setup_special_mode_ACE(struct cifs_ace *pntace, __u64 nmode)
|
||||||
{
|
{
|
||||||
|
@ -928,7 +928,7 @@ compare_mid(__u16 mid, const struct smb_hdr *smb)
|
|||||||
*
|
*
|
||||||
* Citation:
|
* Citation:
|
||||||
*
|
*
|
||||||
* http://blogs.msdn.com/b/openspecification/archive/2009/04/10/smb-maximum-transmit-buffer-size-and-performance-tuning.aspx
|
* https://blogs.msdn.com/b/openspecification/archive/2009/04/10/smb-maximum-transmit-buffer-size-and-performance-tuning.aspx
|
||||||
*/
|
*/
|
||||||
#define CIFS_DEFAULT_NON_POSIX_RSIZE (60 * 1024)
|
#define CIFS_DEFAULT_NON_POSIX_RSIZE (60 * 1024)
|
||||||
#define CIFS_DEFAULT_NON_POSIX_WSIZE (65536)
|
#define CIFS_DEFAULT_NON_POSIX_WSIZE (65536)
|
||||||
|
@ -9,7 +9,7 @@
|
|||||||
*
|
*
|
||||||
* 3.1.5.3 Mapping UTF-16 Strings to Upper Case:
|
* 3.1.5.3 Mapping UTF-16 Strings to Upper Case:
|
||||||
*
|
*
|
||||||
* http://msdn.microsoft.com/en-us/library/hh877830.aspx
|
* https://msdn.microsoft.com/en-us/library/hh877830.aspx
|
||||||
* http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=10921
|
* http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=10921
|
||||||
*
|
*
|
||||||
* In particular, the table in "Windows 8 Upper Case Mapping Table.txt" was
|
* In particular, the table in "Windows 8 Upper Case Mapping Table.txt" was
|
||||||
|
Loading…
Reference in New Issue
Block a user