linux-kernel - [PATCH v2 0/3] afs: Dynamic root improvements

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250107183454.608451-1-dhowells@redhat.com>
Date: Tue,  7 Jan 2025 18:34:48 +0000
From: David Howells <dhowells@...hat.com>
To: Marc Dionne <marc.dionne@...istor.com>
Cc: David Howells <dhowells@...hat.com>,
	Christian Brauner <christian@...uner.io>,
	linux-afs@...ts.infradead.org,
	linux-fsdevel@...r.kernel.org,
	linux-kernel@...r.kernel.org
Subject: [PATCH v2 0/3] afs: Dynamic root improvements

Here are some patches to make a number of improvements to the AFS dynamic
root:

 (1) Create an /afs/.<cell> mountpoint to match the /afs/<cell> mountpoint
     when a cell is created.

 (2) Add some more checks on cell names proposed by the user to prevent
     dodgy symlink bodies from being created.  Also prevent rootcell from
     being altered once set to simplify the locking.

 (3) Change the handling of /afs/@...l from being a dentry name
     substitution at lookup time to making it a symlink to the current cell
     name and also provide a /afs/.@...l symlink to point to the dotted
     cell mountpoint.

The patches are here:

	http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git/log/?h=afs-next

Thanks,
David

Changes
=======
ver #2)
 - Add more checks on the cell names.
 - Prevent the rootcell from being altered once set.
 - Directly create the @cell symlinks rather than going through lookup.

Link: https://lore.kernel.org/r/20250107142513.527300-1-dhowells@redhat.com/ # v1

David Howells (3):
  afs: Make /afs/.<cell> as well as /afs/<cell> mountpoints
  afs: Add rootcell checks
  afs: Make /afs/@...l and /afs/.@...l symlinks

 fs/afs/cell.c              |  21 +++-
 fs/afs/dynroot.c           | 227 ++++++++++++++++++++++++++-----------
 fs/afs/proc.c              |   8 +-
 include/trace/events/afs.h |   2 +
 4 files changed, 186 insertions(+), 72 deletions(-)