netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Pavel Machek <pavel@ucw.cz>
To: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: Baole Ni <baolex.ni@intel.com>,
	pablo@netfilter.org, kaber@trash.net, kadlec@blackhole.kfki.hu,
	davem@davemloft.net, jmorris@namei.org, yoshfuji@linux-ipv6.org,
	m.szyprowski@samsung.com, kyungmin.park@samsung.com,
	k.kozlowski@samsung.com, netfilter-devel@vger.kernel.org,
	coreteam@netfilter.org, netdev@vger.kernel.org,
	linux-kernel@vger.kernel.org, johunt@akamai.com, vpai@akamai.com,
	chuansheng.liu@intel.com, aryabinin@virtuozzo.com
Subject: Re: [PATCH 1115/1285] Replace numeric parameter like 0444 with macro
Date: Tue, 2 Aug 2016 19:47:33 +0200	[thread overview]
Message-ID: <20160802174733.GB4628@amd> (raw)
In-Reply-To: <8737mns0qg.fsf@x220.int.ebiederm.org>

On Tue 2016-08-02 09:29:27, Eric W. Biederman wrote:
> Baole Ni <baolex.ni@intel.com> writes:
> 
> > I find that the developers often just specified the numeric value
> > when calling a macro which is defined with a parameter for access permission.
> > As we know, these numeric value for access permission have had the corresponding macro,
> > and that using macro can improve the robustness and readability of the code,
> > thus, I suggest replacing the numeric parameter with the macro.
> 
> *Scratches my head*  The permissions are not 0444 below.
> With 1285 patches I wonder how many typos you may have made.
> 
> Was this generated by a script?

I think he got it right:

/usr/include/linux/stat.h:#define S_IRUSR 00400

But that does not make me like the series. And yes, hiding backdoor in
one of those would be way too easy...

									Pavel

> Eric
> 
> > Signed-off-by: Chuansheng Liu <chuansheng.liu@intel.com>
> > Signed-off-by: Baole Ni <baolex.ni@intel.com>
> > ---
> >  net/netfilter/ipset/ip_set_core.c | 2 +-
> >  1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git a/net/netfilter/ipset/ip_set_core.c b/net/netfilter/ipset/ip_set_core.c
> > index a748b0c..b6c060d3 100644
> > --- a/net/netfilter/ipset/ip_set_core.c
> > +++ b/net/netfilter/ipset/ip_set_core.c
> > @@ -48,7 +48,7 @@ static inline struct ip_set_net *ip_set_pernet(struct net *net)
> >  
> >  static unsigned int max_sets;
> >  
> > -module_param(max_sets, int, 0600);
> > +module_param(max_sets, int, S_IRUSR | S_IWUSR);
> >  MODULE_PARM_DESC(max_sets, "maximal number of sets");
> >  MODULE_LICENSE("GPL");
> >  MODULE_AUTHOR("Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>");

-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html

  reply	other threads:[~2016-08-02 17:54 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-08-02 12:17 [PATCH 1115/1285] Replace numeric parameter like 0444 with macro Baole Ni
2016-08-02 14:29 ` Eric W. Biederman
2016-08-02 17:47   ` Pavel Machek [this message]
2016-08-02 17:59     ` David Miller

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20160802174733.GB4628@amd \
    --to=pavel@ucw.cz \
    --cc=aryabinin@virtuozzo.com \
    --cc=baolex.ni@intel.com \
    --cc=chuansheng.liu@intel.com \
    --cc=coreteam@netfilter.org \
    --cc=davem@davemloft.net \
    --cc=ebiederm@xmission.com \
    --cc=jmorris@namei.org \
    --cc=johunt@akamai.com \
    --cc=k.kozlowski@samsung.com \
    --cc=kaber@trash.net \
    --cc=kadlec@blackhole.kfki.hu \
    --cc=kyungmin.park@samsung.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=m.szyprowski@samsung.com \
    --cc=netdev@vger.kernel.org \
    --cc=netfilter-devel@vger.kernel.org \
    --cc=pablo@netfilter.org \
    --cc=vpai@akamai.com \
    --cc=yoshfuji@linux-ipv6.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).