| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 9 Jul 2013 23:08:31 -0400
From: "J. Bruce Fields" <bfields@...ldses.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-nfs@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: nfsd changes for 3.11
Please pull nfsd changes for 3.11 from the for-3.11 branch at
git://linux-nfs.org/~bfields/linux.git for-3.11
Changes this time include:
- 4.1 enabled on the server by default: the last 4.1-specific
issues I know of are fixed, so we're not going to find the
rest of the bugs without more exposure.
- Experimental support for NFSv4.2 MAC Labeling (to allow
running selinux over NFS), from Dave Quigley.
- Fixes for some delicate cache/upcall races that could cause
rare server hangs; thanks to Neil Brown and Bodo Stroesser for
extreme debugging persistence.
- Fixes for some bugs found at the recent NFS bakeathon, mostly
v4 and v4.1-specific, but also a generic bug handling
fragmented rpc calls.
--b.
David Quigley (1):
NFSD: Server implementation of MAC Labeling
J. Bruce Fields (21):
nfsd4: store correct client minorversion for >=4.2
security: cap_inode_getsecctx returning garbage
sunrpc: server back channel needs no rpcbind method
nfsd4: fix compile in !CONFIG_NFSD_V4_SECURITY_LABEL case
Merge branch 'for-3.10' into 'for-3.11'
svcrpc: introduce init_svc_cred
svcrpc: store gss mech in svc_cred
nfsd4: implement minimal SP4_MACH_CRED
nfsd4: fail attempts to request gss on the backchannel
nfsd4: allow client to send no cb_sec flavors
nfsd4: clean up nfs4_open_delegation
nfsd4: fix decoding of compounds across page boundaries
nfsd4: minor read_buf cleanup
svcrpc: fix handling of too-short rpc's
svcrpc: don't error out on small tcp fragment
nfsd4: delegation-based open reclaims should bypass permissions
nfsd4: do not throw away 4.1 lock state on last unlock
nfsd4: return delegation immediately if lease fails
svcrpc: fix failures to handle -1 uid's
nfsd4: allow destroy_session over destroyed session
nfsd4: support minorversion 1 by default
Jim Rees (1):
nfsd: avoid undefined signed overflow
NeilBrown (5):
sunrpc/cache: remove races with queuing an upcall.
sunrpc/cache: use cache_fresh_unlocked consistently and correctly.
sunrpc/cache: ensure items removed from cache do not have pending upcalls.
net/sunrpc: xpt_auth_cache should be ignored when expired.
sunrpc: Don't schedule an upcall on a replaced cache entry.
Steve Dickson (3):
NFS: Add NFSv4.2 protocol constants
NFSDv4.2: Add NFS v4.2 support to the NFS server
NFSD: Don't give out read delegations on creates
Zhao Hongjiang (1):
nfsd: get rid of the unused functions in vfs
chaoting fan (1):
sunrpc: the cache_detail in cache_is_valid is unused any more
fs/nfsd/Kconfig | 16 +++
fs/nfsd/nfs4proc.c | 44 ++++++-
fs/nfsd/nfs4state.c | 225 ++++++++++++++++++++++-----------
fs/nfsd/nfs4xdr.c | 169 ++++++++++++++++++++++---
fs/nfsd/nfsd.h | 26 +++-
fs/nfsd/nfssvc.c | 2 +-
fs/nfsd/state.h | 1 +
fs/nfsd/vfs.c | 28 ++++
fs/nfsd/vfs.h | 7 +-
fs/nfsd/xdr4.h | 4 +
include/linux/nfs4.h | 9 ++
include/linux/sunrpc/cache.h | 49 ++++---
include/linux/sunrpc/gss_api.h | 2 +
include/linux/sunrpc/svcauth.h | 11 ++
net/sunrpc/auth_gss/gss_mech_switch.c | 5 +-
net/sunrpc/auth_gss/svcauth_gss.c | 10 +-
net/sunrpc/cache.c | 83 ++++++------
net/sunrpc/svcauth_unix.c | 6 +-
net/sunrpc/svcsock.c | 9 +-
net/sunrpc/xprtsock.c | 1 -
security/capability.c | 2 +-
21 files changed, 527 insertions(+), 182 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists