[GIT PULL] ksmbd server fixes
From: Steve French
Date: Sun Sep 26 2021 - 08:14:24 EST
Please pull the following changes since commit
707a63e9a9dd55432d47bf40457d4a3413888dcc:
Merge tag '5.15-rc1-ksmbd' of git://git.samba.org/ksmbd (2021-09-20
15:35:17 -0700)
are available in the Git repository at:
git://git.samba.org/ksmbd.git tags/5.15-rc2-ksmbd-fixes
for you to fetch changes up to 265fd1991c1db85fbabaad4946ca0e63e2ae688d:
ksmbd: use LOOKUP_BENEATH to prevent the out of share access
(2021-09-24 21:25:23 -0500)
----------------------------------------------------------------
Five fixes for the ksmbd kernel server, including three security fixes:
- removing follow symlinks support
- converting to use LOOKUP_BENEATH to prevent out of share access
- SMB3 compounding security fix
-fix for returning the default streams correctly, fixing a bug when
writing ppt or doc files from some clients
- logging more clearly that ksmbd is experimental (at module load time)
Functional testing passed (e.g.
http://smb3-test-rhel-75.southcentralus.cloudapp.azure.com/#/builders/8/builds/73).
Additional patches are being reviewed, addressing the remaining
potential overflows found in the security reviews.
----------------------------------------------------------------
Hyunchul Lee (1):
ksmbd: use LOOKUP_BENEATH to prevent the out of share access
Namjae Jeon (3):
ksmbd: add default data stream name in FILE_STREAM_INFORMATION
ksmbd: check protocol id in ksmbd_verify_smb_message()
ksmbd: remove follow symlinks support
Steve French (1):
ksmbd: log that server is experimental at module load
fs/ksmbd/misc.c | 100 ++++++++---------------------------------
fs/ksmbd/misc.h | 7 +--
fs/ksmbd/server.c | 3 ++
fs/ksmbd/smb2pdu.c | 119 ++++++++++++++++--------------------------------
fs/ksmbd/smb_common.c | 13 ++++--
fs/ksmbd/smb_common.h | 1 +
fs/ksmbd/vfs.c | 172
++++++++++++++++++++++++++++++++++------------------------------------
fs/ksmbd/vfs.h | 9 +++-
8 files changed, 164 insertions(+), 260 deletions(-)
--
Thanks,
Steve