Re: svn commit: r308212 - in head/sys: fs/nfsserver kern sys

2016-12-10 Thread Konstantin Belousov via svn-src-all
On Fri, Dec 09, 2016 at 12:13:09PM -0800, Conrad Meyer wrote: > On Wed, Nov 2, 2016 at 5:43 AM, Konstantin Belousov wrote: > > Author: kib > > Date: Wed Nov 2 12:43:15 2016 > > New Revision: 308212 > > URL: https://svnweb.freebsd.org/changeset/base/308212 > > > > Log: > > Allow some dotdot look

Re: svn commit: r308212 - in head/sys: fs/nfsserver kern sys

2016-12-09 Thread Conrad Meyer
On Wed, Nov 2, 2016 at 5:43 AM, Konstantin Belousov wrote: > Author: kib > Date: Wed Nov 2 12:43:15 2016 > New Revision: 308212 > URL: https://svnweb.freebsd.org/changeset/base/308212 > > Log: > Allow some dotdot lookups in capability mode. > > If dotdot lookup does not escape from the file d

svn commit: r308212 - in head/sys: fs/nfsserver kern sys

2016-11-02 Thread Konstantin Belousov
Author: kib Date: Wed Nov 2 12:43:15 2016 New Revision: 308212 URL: https://svnweb.freebsd.org/changeset/base/308212 Log: Allow some dotdot lookups in capability mode. If dotdot lookup does not escape from the file descriptor passed as the lookup root, we can allow the component traversa