linux-kernel - [PATCH][ksmbd] log that module is experimental at load time

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date:   Mon, 20 Sep 2021 19:43:45 -0500
From:   Steve French <smfrench@...il.com>
To:     CIFS <linux-cifs@...r.kernel.org>
Cc:     LKML <linux-kernel@...r.kernel.org>,
        ronnie sahlberg <ronniesahlberg@...il.com>,
        Namjae Jeon <linkinjeon@...nel.org>
Subject: [PATCH][ksmbd] log that module is experimental at load time

    While we are working through detailed security reviews
    of ksmbd server code we should remind users that it is an
    experimental module by adding a warning when the module
    loads.  Currently the module shows as experimental
    in Kconfig and is disabled by default, but we don't want
    to confuse users.

    Although ksmbd passes a wide variety of the
    important functional tests (since initial focus had
    been largely on functional testing such as smbtorture,
    xfstests etc.), and ksmbd has added key security
    features (e.g. GCM256 encryption, Kerberos support),
    there are ongoing detailed reviews of the code base
    for path processing and network buffer decoding, and
    this patch reminds users that the module should be
    considered "experimental."

    Reviewed-by: Namjae Jeon <linkinjeon@...nel.org>
    Reviewed-by: Ronnie Sahlberg <lsahlber@...hat.com>
    Signed-off-by: Steve French <stfrench@...rosoft.com>

diff --git a/fs/ksmbd/server.c b/fs/ksmbd/server.c
index e6a9f6aa47eb..2a2b2135bfde 100644
--- a/fs/ksmbd/server.c
+++ b/fs/ksmbd/server.c
@@ -584,6 +584,9 @@ static int __init ksmbd_server_init(void)
        ret = ksmbd_workqueue_init();
        if (ret)
                goto err_crypto_destroy;
+
+       pr_warn_once("The ksmbd server is experimental, use at your
own risk.\n");
+
        return 0;

 err_crypto_destroy:

-- 
Thanks,

Steve