linux-kernel - Re: Moving unmaintained filesystems to staging

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20180503091806.GA32180@amd>
Date:   Thu, 3 May 2018 11:18:06 +0200
From:   Pavel Machek <pavel@....cz>
To:     Martin Steigerwald <martin@...htvoll.de>
Cc:     Matthew Wilcox <willy@...radead.org>,
        linux-fsdevel@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: Moving unmaintained filesystems to staging

On Thu 2018-04-26 12:36:50, Martin Steigerwald wrote:
> Pavel Machek - 26.04.18, 08:11:
> > On Wed 2018-04-25 08:46:02, Matthew Wilcox wrote:
> > > Recently ncpfs got moved to staging.  Also recently, we had some
> > > fuzzer developers report bugs in hfs, which they deem a security
> > > hole because Ubuntu attempts to automount an inserted USB device as
> > > hfs.
> > 
> > We promise "no-regressions" for code in main repository, no such
> > promise for staging. We have quite a lot of code without maintainer.
> > 
> > Moving code to staging means it will get broken -- staging was not
> > designed for this. I believe moving anything there is bad idea.
> > 
> > Staging is for ugly code, not for code that needs new maintainter.
> 
> Good point.
> 
> Moving things in and out to some "unmaintained" directory… I am not sure 
> about that either. I tend to think that moving code around does not 
> solve the underlying issue.
> 
> Which, according to what I got from Matthew, was that distributors 
> enable just about every filesystem they can enable which lead to hfs 
> being used for automounting an USB stick formatted with it.

If distro's are shipping it, they are also willing to fix it. So
... no need to drop the code just yet.

									Pavel
-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html

Download attachment "signature.asc" of type "application/pgp-signature" (182 bytes)