From: L A Walsh <cifs-gT3AUAsYRbTYtjvyW6yDsg@public.gmane.org>
To: Scott Lovenberg
<scott.lovenberg-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>,
linux-cifs <linux-cifs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>
Subject: Re: SMB2: Enforce sec= mount option
Date: Thu, 12 Jan 2017 02:33:08 -0800 [thread overview]
Message-ID: <58775B64.2030205@tlinx.org> (raw)
In-Reply-To: <CAFB9KM3S+p3sU26LKGwqaZ_3g4gkPPzEFzohwAFOa-PZPqZTAQ-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
Scott Lovenberg wrote:
> It'd take a tiny bit of messing with the command line parser, but I'd
> be for that. As a gesture of good faith, since I raised the issue,
> I'd be willing to submit the patch set for mount.cifs to support this
> if everyone is on board. I'd suggest staying away from '<' and '>'
---
Yeah, the '<' sent a shiver as I wrote it. find uses "-5" means
'<=5', but
the minus bothered me a bit, but perhaps less than the '<'.
Was looking at samba's switches they allow specifying "min" and "max"
for protocols, that could be written compactly with "proto=+smb1,-smb2.1",
or any number of more verbose options. The options for auth+security seem
a bit less regular than always specifying a range, like some options
automatically disable lower security options -- I suppose specifying
a 'max' isn't needed, since if once side offers a higher level that is
too high for the other, the other can just NACK during the negotiation.
Better get back to lurking now... ;-)
next prev parent reply other threads:[~2017-01-12 10:33 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-12-08 6:46 [PATCH] SMB2: Enforce sec= mount option Sachin Prabhu
[not found] ` <1481179577-15995-1-git-send-email-sprabhu-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2016-12-08 8:06 ` Scott Lovenberg
[not found] ` <CAFB9KM0oPPm4bYyKd75Yjy-2kCZ=0UTpwn=ONCRo0g5waNa6AA-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2016-12-08 9:03 ` Sachin Prabhu
[not found] ` <1481187800.4195.19.camel-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2016-12-08 9:14 ` Scott Lovenberg
2017-01-11 11:45 ` Germano Percossi
[not found] ` <c0748fb1-4161-ea0f-3f6d-b0705bb83a9d-Sxgqhf6Nn4DQT0dZR+AlfA@public.gmane.org>
2017-01-11 12:17 ` Sachin Prabhu
[not found] ` <1484137071.29387.9.camel-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2017-01-11 17:48 ` Scott Lovenberg
[not found] ` <CAH2r5mvU4_O_epw8tTPOHV3UVRyi9eNmE85cFPGVDGR8twQiZg@mail.gmail.com>
[not found] ` <CAH2r5mvU4_O_epw8tTPOHV3UVRyi9eNmE85cFPGVDGR8twQiZg-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2017-01-11 17:59 ` Fwd: " Steve French
2017-01-10 23:11 ` L A Walsh
[not found] ` <58756A3D.6000705-gT3AUAsYRbTYtjvyW6yDsg@public.gmane.org>
2017-01-11 10:46 ` Aurélien Aptel
2017-01-11 21:02 ` Scott Lovenberg
[not found] ` <CAFB9KM3S+p3sU26LKGwqaZ_3g4gkPPzEFzohwAFOa-PZPqZTAQ-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2017-01-12 4:23 ` Steve French
2017-01-12 10:33 ` L A Walsh [this message]
2017-01-16 5:49 ` Sachin Prabhu
2017-01-10 23:30 ` L A Walsh
[not found] ` <CAH2r5msW1Z1j3J+c3RF7NAH9ChKxy2GajKNp7AUxF4sfeZPXUA@mail.gmail.com>
[not found] ` <CAH2r5msW1Z1j3J+c3RF7NAH9ChKxy2GajKNp7AUxF4sfeZPXUA-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org>
2017-01-10 20:23 ` Fwd: [PATCH] " Steve French
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=58775B64.2030205@tlinx.org \
--to=cifs-gt3auasyrbtytjvyw6ydsg@public.gmane.org \
--cc=linux-cifs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
--cc=scott.lovenberg-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.