linux-kernel - Re: [PATCH] Replace HTTP links with HTTPS ones: input drivers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20200715214309.GA867493@bogus>
Date:   Wed, 15 Jul 2020 15:43:09 -0600
From:   Rob Herring <robh@...nel.org>
To:     "Alexander A. Klimov" <grandmaster@...klimov.de>
Cc:     ben.dooks@...ethink.co.uk, swboyd@...omium.org, arnd@...db.de,
        megous@...ous.com, linux-input@...r.kernel.org,
        rydberg@...math.org, m.felsch@...gutronix.de,
        Henk.Vergonet@...il.com, linux-kernel@...r.kernel.org,
        ronald@...ovation.ch, lee.jones@...aro.org, Anson.Huang@....com,
        corbet@....net, christophe.jaillet@...adoo.fr,
        marcus.folkesson@...il.com, p.zabel@...gutronix.de,
        luzmaximilian@...il.com, robh+dt@...nel.org,
        linux-doc@...r.kernel.org, andriy.shevchenko@...ux.intel.com,
        mylene.josserand@...tlin.com, usbb2k-api-dev@...gnu.org,
        oneukum@...e.com, linus.walleij@...aro.org, jeff@...undy.com,
        masneyb@...tation.org, james.hilliard1@...il.com,
        devicetree@...r.kernel.org, a.fatoum@...gutronix.de,
        krzk@...nel.org, dmitry.torokhov@...il.com
Subject: Re: [PATCH] Replace HTTP links with HTTPS ones: input drivers

On Sun, 05 Jul 2020 09:49:59 +0200, Alexander A. Klimov wrote:
> Rationale:
> Reduces attack surface on kernel devs opening the links for MITM
> as HTTPS traffic is much harder to manipulate.
> 
> Deterministic algorithm:
> For each file:
>   If not .svg:
>     For each line:
>       If doesn't contain `\bxmlns\b`:
>         For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
>           If both the HTTP and HTTPS versions
>           return 200 OK and serve the same content:
>             Replace HTTP with HTTPS.
> 
> Signed-off-by: Alexander A. Klimov <grandmaster@...klimov.de>
> ---
>  Continuing my work started at 93431e0607e5.
> 
>  If there are any URLs to be removed completely or at least not HTTPSified:
>  Just clearly say so and I'll *undo my change*.
>  See also https://lkml.org/lkml/2020/6/27/64
> 
>  If there are any valid, but yet not changed URLs:
>  See https://lkml.org/lkml/2020/6/26/837
> 
>  .../devicetree/bindings/input/ps2keyb-mouse-apbps2.txt        | 2 +-
>  .../devicetree/bindings/input/rmi4/rmi_2d_sensor.txt          | 2 +-
>  Documentation/devicetree/bindings/input/rmi4/rmi_f01.txt      | 2 +-
>  Documentation/devicetree/bindings/input/ti,drv260x.txt        | 2 +-
>  Documentation/devicetree/bindings/input/ti,drv2665.txt        | 2 +-
>  Documentation/devicetree/bindings/input/ti,drv2667.txt        | 2 +-
>  Documentation/input/devices/appletouch.rst                    | 2 +-
>  Documentation/input/devices/bcm5974.rst                       | 4 ++--
>  Documentation/input/devices/iforce-protocol.rst               | 2 +-
>  Documentation/input/devices/joystick-parport.rst              | 2 +-
>  Documentation/input/devices/ntrig.rst                         | 2 +-
>  Documentation/input/devices/pxrc.rst                          | 2 +-
>  Documentation/input/multi-touch-protocol.rst                  | 2 +-
>  drivers/input/keyboard/Kconfig                                | 2 +-
>  drivers/input/keyboard/lkkbd.c                                | 2 +-
>  drivers/input/keyboard/opencores-kbd.c                        | 2 +-
>  drivers/input/keyboard/tca8418_keypad.c                       | 2 +-
>  drivers/input/misc/Kconfig                                    | 2 +-
>  drivers/input/misc/cm109.c                                    | 2 +-
>  drivers/input/misc/gpio_decoder.c                             | 2 +-
>  drivers/input/misc/palmas-pwrbutton.c                         | 2 +-
>  drivers/input/misc/powermate.c                                | 2 +-
>  drivers/input/misc/tps65218-pwrbutton.c                       | 2 +-
>  drivers/input/misc/yealink.c                                  | 2 +-
>  drivers/input/mouse/vsxxxaa.c                                 | 2 +-
>  drivers/input/serio/apbps2.c                                  | 2 +-
>  drivers/input/touchscreen/edt-ft5x06.c                        | 2 +-
>  drivers/input/touchscreen/iqs5xx.c                            | 2 +-
>  drivers/input/touchscreen/mc13783_ts.c                        | 2 +-
>  drivers/input/touchscreen/ti_am335x_tsc.c                     | 2 +-
>  drivers/input/touchscreen/usbtouchscreen.c                    | 2 +-
>  include/uapi/linux/input-event-codes.h                        | 2 +-
>  32 files changed, 33 insertions(+), 33 deletions(-)
> 

Acked-by: Rob Herring <robh@...nel.org>