[GIT PULL] ksmbd server fixes

From: Steve French
Date: Sun Sep 26 2021 - 08:14:24 EST


Please pull the following changes since commit
707a63e9a9dd55432d47bf40457d4a3413888dcc:

Merge tag '5.15-rc1-ksmbd' of git://git.samba.org/ksmbd (2021-09-20
15:35:17 -0700)

are available in the Git repository at:

git://git.samba.org/ksmbd.git tags/5.15-rc2-ksmbd-fixes

for you to fetch changes up to 265fd1991c1db85fbabaad4946ca0e63e2ae688d:

ksmbd: use LOOKUP_BENEATH to prevent the out of share access
(2021-09-24 21:25:23 -0500)

----------------------------------------------------------------
Five fixes for the ksmbd kernel server, including three security fixes:
- removing follow symlinks support
- converting to use LOOKUP_BENEATH to prevent out of share access
- SMB3 compounding security fix
-fix for returning the default streams correctly, fixing a bug when
writing ppt or doc files from some clients
- logging more clearly that ksmbd is experimental (at module load time)

Functional testing passed (e.g.
http://smb3-test-rhel-75.southcentralus.cloudapp.azure.com/#/builders/8/builds/73).
Additional patches are being reviewed, addressing the remaining
potential overflows found in the security reviews.
----------------------------------------------------------------
Hyunchul Lee (1):
ksmbd: use LOOKUP_BENEATH to prevent the out of share access

Namjae Jeon (3):
ksmbd: add default data stream name in FILE_STREAM_INFORMATION
ksmbd: check protocol id in ksmbd_verify_smb_message()
ksmbd: remove follow symlinks support

Steve French (1):
ksmbd: log that server is experimental at module load

fs/ksmbd/misc.c | 100 ++++++++---------------------------------
fs/ksmbd/misc.h | 7 +--
fs/ksmbd/server.c | 3 ++
fs/ksmbd/smb2pdu.c | 119 ++++++++++++++++--------------------------------
fs/ksmbd/smb_common.c | 13 ++++--
fs/ksmbd/smb_common.h | 1 +
fs/ksmbd/vfs.c | 172
++++++++++++++++++++++++++++++++++------------------------------------
fs/ksmbd/vfs.h | 9 +++-
8 files changed, 164 insertions(+), 260 deletions(-)


--
Thanks,

Steve