c52b7c807b
Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.
Deterministic algorithm:
For each file:
If not .svg:
For each line:
If doesn't contain `\bxmlns\b`:
For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`:
If both the HTTP and HTTPS versions
return 200 OK and serve the same content:
Replace HTTP with HTTPS.
Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: Ben Boeckel <mathstuf@gmail.com>
36 lines
1.1 KiB
C
36 lines
1.1 KiB
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
/*
|
|
* Copyright (C) 2010 IBM Corporation
|
|
* Copyright (C) 2010 Politecnico di Torino, Italy
|
|
* TORSEC group -- https://security.polito.it
|
|
*
|
|
* Authors:
|
|
* Mimi Zohar <zohar@us.ibm.com>
|
|
* Roberto Sassu <roberto.sassu@polito.it>
|
|
*/
|
|
|
|
#ifndef _KEYS_ENCRYPTED_TYPE_H
|
|
#define _KEYS_ENCRYPTED_TYPE_H
|
|
|
|
#include <linux/key.h>
|
|
#include <linux/rcupdate.h>
|
|
|
|
struct encrypted_key_payload {
|
|
struct rcu_head rcu;
|
|
char *format; /* datablob: format */
|
|
char *master_desc; /* datablob: master key name */
|
|
char *datalen; /* datablob: decrypted key length */
|
|
u8 *iv; /* datablob: iv */
|
|
u8 *encrypted_data; /* datablob: encrypted data */
|
|
unsigned short datablob_len; /* length of datablob */
|
|
unsigned short decrypted_datalen; /* decrypted data length */
|
|
unsigned short payload_datalen; /* payload data length */
|
|
unsigned short encrypted_key_format; /* encrypted key format */
|
|
u8 *decrypted_data; /* decrypted data */
|
|
u8 payload_data[]; /* payload data + datablob + hmac */
|
|
};
|
|
|
|
extern struct key_type key_type_encrypted;
|
|
|
|
#endif /* _KEYS_ENCRYPTED_TYPE_H */
|