c9fecf505a
Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.
Deterministic algorithm:
For each file:
If not .svg:
For each line:
If doesn't contain `\bxmlns\b`:
For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
If both the HTTP and HTTPS versions
return 200 OK and serve the same content:
Replace HTTP with HTTPS.
Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Acked-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: James Morris <jmorris@namei.org>
28 lines
812 B
C
28 lines
812 B
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
/*
|
|
* ecryptfs_format.h: helper functions for the encrypted key type
|
|
*
|
|
* Copyright (C) 2006 International Business Machines Corp.
|
|
* Copyright (C) 2010 Politecnico di Torino, Italy
|
|
* TORSEC group -- https://security.polito.it
|
|
*
|
|
* Authors:
|
|
* Michael A. Halcrow <mahalcro@us.ibm.com>
|
|
* Tyler Hicks <tyhicks@ou.edu>
|
|
* Roberto Sassu <roberto.sassu@polito.it>
|
|
*/
|
|
|
|
#ifndef __KEYS_ECRYPTFS_H
|
|
#define __KEYS_ECRYPTFS_H
|
|
|
|
#include <linux/ecryptfs.h>
|
|
|
|
#define PGP_DIGEST_ALGO_SHA512 10
|
|
|
|
u8 *ecryptfs_get_auth_tok_key(struct ecryptfs_auth_tok *auth_tok);
|
|
void ecryptfs_get_versions(int *major, int *minor, int *file_version);
|
|
int ecryptfs_fill_auth_tok(struct ecryptfs_auth_tok *auth_tok,
|
|
const char *key_desc);
|
|
|
|
#endif /* __KEYS_ECRYPTFS_H */
|