On Fri, Dec 09, 2016 at 12:13:09PM -0800, Conrad Meyer wrote: > On Wed, Nov 2, 2016 at 5:43 AM, Konstantin Belousov <k...@freebsd.org> wrote: > > Author: kib > > Date: Wed Nov 2 12:43:15 2016 > > New Revision: 308212 > > URL: https://svnweb.freebsd.org/changeset/base/308212 > > > > Log: > > Allow some dotdot lookups in capability mode. > > > > If dotdot lookup does not escape from the file descriptor passed as > > the lookup root, we can allow the component traversal. Track the > > directories traversed, and check the result of dotdot lookup against > > the recorded list of the directory vnodes. > > > > Dotdot lookups are enabled by sysctl vfs.lookup_cap_dotdot, currently > > disabled by default until more verification of the approach is done. > > Hi Konstantin, > > Are we waiting on a specific reviewer or something else? It would be > very nice to have this enabled by default. I did waited for some review, but it obviously not going to happen. Please push the button for D8746, and I will commit the change. _______________________________________________ svn-src-all@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/svn-src-all To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
Re: svn commit: r308212 - in head/sys: fs/nfsserver kern sys
Konstantin Belousov via svn-src-all Sat, 10 Dec 2016 02:12:47 -0800
- svn commit: r308212 - in head/sys: fs/... Konstantin Belousov
- Re: svn commit: r308212 - in head... Conrad Meyer
- Re: svn commit: r308212 - in ... Konstantin Belousov via svn-src-all