From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-7.0 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SIGNED_OFF_BY,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id CC5D2C433E0 for ; Wed, 12 Aug 2020 01:36:02 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id 9272E2054F for ; Wed, 12 Aug 2020 01:36:02 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=kernel.org header.i=@kernel.org header.b="IfQ73xRx" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 9272E2054F Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=linux-foundation.org Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id 6CF478D0063; Tue, 11 Aug 2020 21:36:01 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 6A7BB8D0001; Tue, 11 Aug 2020 21:36:01 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 599AA8D0063; Tue, 11 Aug 2020 21:36:01 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0091.hostedemail.com [216.40.44.91]) by kanga.kvack.org (Postfix) with ESMTP id 4045F8D0001 for ; Tue, 11 Aug 2020 21:36:01 -0400 (EDT) Received: from smtpin15.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay04.hostedemail.com (Postfix) with ESMTP id F306D3657 for ; Wed, 12 Aug 2020 01:36:00 +0000 (UTC) X-FDA: 77140200480.15.ghost04_2f0616526fe7 Received: from filter.hostedemail.com (10.5.16.251.rfc1918.com [10.5.16.251]) by smtpin15.hostedemail.com (Postfix) with ESMTP id C99E81814B0C7 for ; Wed, 12 Aug 2020 01:36:00 +0000 (UTC) X-HE-Tag: ghost04_2f0616526fe7 X-Filterd-Recvd-Size: 2997 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by imf29.hostedemail.com (Postfix) with ESMTP for ; Wed, 12 Aug 2020 01:36:00 +0000 (UTC) Received: from localhost.localdomain (c-73-231-172-41.hsd1.ca.comcast.net [73.231.172.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPSA id 71D632054F; Wed, 12 Aug 2020 01:35:59 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1597196159; bh=MQMIOTR8q3EHIhGQ0KufveJ/E3+Z2B0+feOG8odXVrQ=; h=Date:From:To:Subject:In-Reply-To:From; b=IfQ73xRxJXbCJTyxGPUskOdX7myCX8sQbrGNq19e8sGJVDvHC6Um21eB2NSAEbz2p QQW+HvIc6AwvkYGKD6cJZaUUnRPbpqi3JS+vuWRsoSGg8/O9usZ8UvS/ebV2BZtTWt iottOWT0QvdcPktQnaqOsODYvIncGsrq45PE048Q= Date: Tue, 11 Aug 2020 18:35:59 -0700 From: Andrew Morton To: akpm@linux-foundation.org, grandmaster@al2klimov.de, hirofumi@mail.parknet.co.jp, linux-mm@kvack.org, mm-commits@vger.kernel.org, torvalds@linux-foundation.org Subject: [patch 109/165] VFAT/FAT/MSDOS FILESYSTEM: replace HTTP links with HTTPS ones Message-ID: <20200812013559.qFCfKIMLV%akpm@linux-foundation.org> In-Reply-To: <20200811182949.e12ae9a472e3b5e27e16ad6c@linux-foundation.org> User-Agent: s-nail v14.8.16 X-Rspamd-Queue-Id: C99E81814B0C7 X-Spamd-Result: default: False [0.00 / 100.00] X-Rspamd-Server: rspam03 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: From: "Alexander A. Klimov" Subject: VFAT/FAT/MSDOS FILESYSTEM: replace HTTP links with HTTPS ones Rationale: Reduces attack surface on kernel devs opening the links for MITM as HTTPS traffic is much harder to manipulate. Deterministic algorithm: For each file: If not .svg: For each line: If doesn't contain `xmlns`: For each link, `http://[^# ]*(?:\w|/)`: If neither `gnu\.org/license`, nor `mozilla\.org/MPL`: If both the HTTP and HTTPS versions return 200 OK and serve the same content: Replace HTTP with HTTPS. Link: http://lkml.kernel.org/r/20200708200409.22293-1-grandmaster@al2klimov.de Signed-off-by: Alexander A. Klimov Acked-by: OGAWA Hirofumi Signed-off-by: Andrew Morton --- fs/fat/Kconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/fs/fat/Kconfig~vfat-fat-msdos-filesystem-replace-http-links-with-https-ones +++ a/fs/fat/Kconfig @@ -41,7 +41,7 @@ config MSDOS_FS they are compressed; to access compressed MSDOS partitions under Linux, you can either use the DOS emulator DOSEMU, described in the DOSEMU-HOWTO, available from - , or try dmsdosfs in + , or try dmsdosfs in . If you intend to use dosemu with a non-compressed MSDOS partition, say Y here) and MSDOS floppies. This means that file access becomes _