Replace HTTP links with HTTPS ones: CIFS

Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.

Deterministic algorithm:
For each file:
  If not .svg:
    For each line:
      If doesn't contain `\bxmlns\b`:
        For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
          If both the HTTP and HTTPS versions
          return 200 OK and serve the same content:
            Replace HTTP with HTTPS.

Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Reviewed-by: Aurelien Aptel <aaptel@suse.com>
Link: https://lore.kernel.org/r/20200627103125.71828-1-grandmaster@al2klimov.de
Signed-off-by: Jonathan Corbet <corbet@lwn.net>
This commit is contained in:
Alexander A. Klimov 2020-06-27 12:31:25 +02:00 committed by Jonathan Corbet
parent c0ad0befed
commit cba22b1c59
6 changed files with 9 additions and 9 deletions

View File

@ -98,7 +98,7 @@ x) Finish support for SMB3.1.1 compression
Known Bugs Known Bugs
========== ==========
See http://bugzilla.samba.org - search on product "CifsVFS" for See https://bugzilla.samba.org - search on product "CifsVFS" for
current bug list. Also check http://bugzilla.kernel.org (Product = File System, Component = CIFS) current bug list. Also check http://bugzilla.kernel.org (Product = File System, Component = CIFS)
1) existing symbolic links (Windows reparse points) are recognized but 1) existing symbolic links (Windows reparse points) are recognized but

View File

@ -17,7 +17,7 @@ standard for interoperating between Macs and Windows and major NAS appliances.
Please see Please see
MS-SMB2 (for detailed SMB2/SMB3/SMB3.1.1 protocol specification) MS-SMB2 (for detailed SMB2/SMB3/SMB3.1.1 protocol specification)
http://protocolfreedom.org/ and http://protocolfreedom.org/ and
http://samba.org/samba/PFIF/ https://samba.org/samba/PFIF/
for more details. for more details.
@ -32,7 +32,7 @@ Build instructions
For Linux: For Linux:
1) Download the kernel (e.g. from http://www.kernel.org) 1) Download the kernel (e.g. from https://www.kernel.org)
and change directory into the top of the kernel directory tree and change directory into the top of the kernel directory tree
(e.g. /usr/src/linux-2.5.73) (e.g. /usr/src/linux-2.5.73)
2) make menuconfig (or make xconfig) 2) make menuconfig (or make xconfig)
@ -831,7 +831,7 @@ the active sessions and the shares that are mounted.
Enabling Kerberos (extended security) works but requires version 1.2 or later Enabling Kerberos (extended security) works but requires version 1.2 or later
of the helper program cifs.upcall to be present and to be configured in the of the helper program cifs.upcall to be present and to be configured in the
/etc/request-key.conf file. The cifs.upcall helper program is from the Samba /etc/request-key.conf file. The cifs.upcall helper program is from the Samba
project(http://www.samba.org). NTLM and NTLMv2 and LANMAN support do not project(https://www.samba.org). NTLM and NTLMv2 and LANMAN support do not
require this helper. Note that NTLMv2 security (which does not require the require this helper. Note that NTLMv2 security (which does not require the
cifs.upcall helper program), instead of using Kerberos, is sufficient for cifs.upcall helper program), instead of using Kerberos, is sufficient for
some use cases. some use cases.

View File

@ -16,7 +16,7 @@
# GNU General Public License for more details. # GNU General Public License for more details.
# #
# You should have received a copy of the GNU General Public License # You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>. # along with this program. If not, see <https://www.gnu.org/licenses/>.
# #
while(<>) { while(<>) {

View File

@ -49,7 +49,7 @@ static const struct cifs_sid sid_unix_groups = { 1, 1, {0, 0, 0, 0, 0, 22},
{cpu_to_le32(2), 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0} }; {cpu_to_le32(2), 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0} };
/* /*
* See http://technet.microsoft.com/en-us/library/hh509017(v=ws.10).aspx * See https://technet.microsoft.com/en-us/library/hh509017(v=ws.10).aspx
*/ */
/* S-1-5-88 MS NFS and Apple style UID/GID/mode */ /* S-1-5-88 MS NFS and Apple style UID/GID/mode */
@ -825,7 +825,7 @@ unsigned int setup_authusers_ACE(struct cifs_ace *pntace)
/* /*
* Fill in the special SID based on the mode. See * Fill in the special SID based on the mode. See
* http://technet.microsoft.com/en-us/library/hh509017(v=ws.10).aspx * https://technet.microsoft.com/en-us/library/hh509017(v=ws.10).aspx
*/ */
unsigned int setup_special_mode_ACE(struct cifs_ace *pntace, __u64 nmode) unsigned int setup_special_mode_ACE(struct cifs_ace *pntace, __u64 nmode)
{ {

View File

@ -928,7 +928,7 @@ compare_mid(__u16 mid, const struct smb_hdr *smb)
* *
* Citation: * Citation:
* *
* http://blogs.msdn.com/b/openspecification/archive/2009/04/10/smb-maximum-transmit-buffer-size-and-performance-tuning.aspx * https://blogs.msdn.com/b/openspecification/archive/2009/04/10/smb-maximum-transmit-buffer-size-and-performance-tuning.aspx
*/ */
#define CIFS_DEFAULT_NON_POSIX_RSIZE (60 * 1024) #define CIFS_DEFAULT_NON_POSIX_RSIZE (60 * 1024)
#define CIFS_DEFAULT_NON_POSIX_WSIZE (65536) #define CIFS_DEFAULT_NON_POSIX_WSIZE (65536)

View File

@ -9,7 +9,7 @@
* *
* 3.1.5.3 Mapping UTF-16 Strings to Upper Case: * 3.1.5.3 Mapping UTF-16 Strings to Upper Case:
* *
* http://msdn.microsoft.com/en-us/library/hh877830.aspx * https://msdn.microsoft.com/en-us/library/hh877830.aspx
* http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=10921 * http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=10921
* *
* In particular, the table in "Windows 8 Upper Case Mapping Table.txt" was * In particular, the table in "Windows 8 Upper Case Mapping Table.txt" was