<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux-toradex.git/fs, branch v2.6.30-rc5</title>
<subtitle>Linux kernel for Apalis and Colibri modules</subtitle>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/'/>
<entry>
<title>Merge git://git.kernel.org/pub/scm/linux/kernel/git/sfrench/cifs-2.6</title>
<updated>2009-05-08T04:13:24+00:00</updated>
<author>
<name>Linus Torvalds</name>
<email>torvalds@linux-foundation.org</email>
</author>
<published>2009-05-08T04:13:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=d7a5926978cb109b2db5985c65086483caf9e226'/>
<id>d7a5926978cb109b2db5985c65086483caf9e226</id>
<content type='text'>
* git://git.kernel.org/pub/scm/linux/kernel/git/sfrench/cifs-2.6: (32 commits)
  [CIFS] Fix double list addition in cifs posix open code
  [CIFS] Allow raw ntlmssp code to be enabled with sec=ntlmssp
  [CIFS] Fix SMB uid in NTLMSSP authenticate request
  [CIFS] NTLMSSP reenabled after move from connect.c to sess.c
  [CIFS] Remove sparse warning
  [CIFS] remove checkpatch warning
  [CIFS] Fix final user of old string conversion code
  [CIFS] remove cifs_strfromUCS_le
  [CIFS] NTLMSSP support moving into new file, old dead code removed
  [CIFS] Fix endian conversion of vcnum field
  [CIFS] Remove trailing whitespace
  [CIFS] Remove sparse endian warnings
  [CIFS] Add remaining ntlmssp flags and standardize field names
  [CIFS] Fix build warning
  cifs: fix length handling in cifs_get_name_from_search_buf
  [CIFS] Remove unneeded QuerySymlink call and fix mapping for unmapped status
  [CIFS] rename cifs_strndup to cifs_strndup_from_ucs
  Added loop check when mounting DFS tree.
  Enable dfs submounts to handle remote referrals.
  [CIFS] Remove older session setup implementation
  ...
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* git://git.kernel.org/pub/scm/linux/kernel/git/sfrench/cifs-2.6: (32 commits)
  [CIFS] Fix double list addition in cifs posix open code
  [CIFS] Allow raw ntlmssp code to be enabled with sec=ntlmssp
  [CIFS] Fix SMB uid in NTLMSSP authenticate request
  [CIFS] NTLMSSP reenabled after move from connect.c to sess.c
  [CIFS] Remove sparse warning
  [CIFS] remove checkpatch warning
  [CIFS] Fix final user of old string conversion code
  [CIFS] remove cifs_strfromUCS_le
  [CIFS] NTLMSSP support moving into new file, old dead code removed
  [CIFS] Fix endian conversion of vcnum field
  [CIFS] Remove trailing whitespace
  [CIFS] Remove sparse endian warnings
  [CIFS] Add remaining ntlmssp flags and standardize field names
  [CIFS] Fix build warning
  cifs: fix length handling in cifs_get_name_from_search_buf
  [CIFS] Remove unneeded QuerySymlink call and fix mapping for unmapped status
  [CIFS] rename cifs_strndup to cifs_strndup_from_ucs
  Added loop check when mounting DFS tree.
  Enable dfs submounts to handle remote referrals.
  [CIFS] Remove older session setup implementation
  ...
</pre>
</div>
</content>
</entry>
<entry>
<title>[CIFS] Fix double list addition in cifs posix open code</title>
<updated>2009-05-08T03:04:30+00:00</updated>
<author>
<name>Steve French</name>
<email>sfrench@us.ibm.com</email>
</author>
<published>2009-05-08T03:04:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=90e4ee5d311d4e0729daa676b1d7f754265b5874'/>
<id>90e4ee5d311d4e0729daa676b1d7f754265b5874</id>
<content type='text'>
Remove adding open file entry twice to lists in the file
Do not fill file info twice in case of posix opens and creates

Signed-off-by: Shirish Pargaonkar &lt;shirishp@us.ibm.com&gt;
Signed-off-by: Steve French &lt;sfrench@us.ibm.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remove adding open file entry twice to lists in the file
Do not fill file info twice in case of posix opens and creates

Signed-off-by: Shirish Pargaonkar &lt;shirishp@us.ibm.com&gt;
Signed-off-by: Steve French &lt;sfrench@us.ibm.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>fiemap: fix problem with setting FIEMAP_EXTENT_LAST</title>
<updated>2009-05-06T23:36:09+00:00</updated>
<author>
<name>Josef Bacik</name>
<email>jbacik@redhat.com</email>
</author>
<published>2009-05-06T23:02:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=df3935ffd6166fdd00702cf548fb5bb55737758b'/>
<id>df3935ffd6166fdd00702cf548fb5bb55737758b</id>
<content type='text'>
Fix a problem where the generic block based fiemap stuff would not
properly set FIEMAP_EXTENT_LAST on the last extent.  I've reworked things
to keep track if we go past the EOF, and mark the last extent properly.
The problem was reported by and tested by Eric Sandeen.

Tested-by: Eric Sandeen &lt;sandeen@redhat.com&gt;
Signed-off-by: Josef Bacik &lt;jbacik@redhat.com&gt;
Cc: &lt;linux-ext4@vger.kernel.org&gt;
Cc: &lt;xfs-masters@oss.sgi.com&gt;
Cc: &lt;linux-btrfs@vger.kernel.org&gt;
Cc: Steven Whitehouse &lt;swhiteho@redhat.com&gt;
Cc: Mark Fasheh &lt;mfasheh@suse.com&gt;
Cc: Joel Becker &lt;Joel.Becker@oracle.com&gt;
Cc: &lt;stable@kernel.org&gt;
Signed-off-by: Andrew Morton &lt;akpm@linux-foundation.org&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@linux-foundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fix a problem where the generic block based fiemap stuff would not
properly set FIEMAP_EXTENT_LAST on the last extent.  I've reworked things
to keep track if we go past the EOF, and mark the last extent properly.
The problem was reported by and tested by Eric Sandeen.

Tested-by: Eric Sandeen &lt;sandeen@redhat.com&gt;
Signed-off-by: Josef Bacik &lt;jbacik@redhat.com&gt;
Cc: &lt;linux-ext4@vger.kernel.org&gt;
Cc: &lt;xfs-masters@oss.sgi.com&gt;
Cc: &lt;linux-btrfs@vger.kernel.org&gt;
Cc: Steven Whitehouse &lt;swhiteho@redhat.com&gt;
Cc: Mark Fasheh &lt;mfasheh@suse.com&gt;
Cc: Joel Becker &lt;Joel.Becker@oracle.com&gt;
Cc: &lt;stable@kernel.org&gt;
Signed-off-by: Andrew Morton &lt;akpm@linux-foundation.org&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@linux-foundation.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>inotify: use GFP_NOFS in kernel_event() to work around a lockdep false-positive</title>
<updated>2009-05-06T23:36:09+00:00</updated>
<author>
<name>Wu Fengguang</name>
<email>fengguang.wu@intel.com</email>
</author>
<published>2009-05-06T23:02:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=381a80e6df396eaabef2c00f85974a4579ac1c70'/>
<id>381a80e6df396eaabef2c00f85974a4579ac1c70</id>
<content type='text'>
There is what we believe to be a false positive reported by lockdep.

inotify_inode_queue_event() =&gt; take inotify_mutex =&gt; kernel_event() =&gt;
kmalloc() =&gt; SLOB =&gt; alloc_pages_node() =&gt; page reclaim =&gt; slab reclaim =&gt;
dcache reclaim =&gt; inotify_inode_is_dead =&gt; take inotify_mutex =&gt; deadlock

The plan is to fix this via lockdep annotation, but that is proving to be
quite involved.

The patch flips the allocation over to GFP_NFS to shut the warning up, for
the 2.6.30 release.

Hopefully we will fix this for real in 2.6.31.  I'll queue a patch in -mm
to switch it back to GFP_KERNEL so we don't forget.

  =================================
  [ INFO: inconsistent lock state ]
  2.6.30-rc2-next-20090417 #203
  ---------------------------------
  inconsistent {RECLAIM_FS-ON-W} -&gt; {IN-RECLAIM_FS-W} usage.
  kswapd0/380 [HC0[0]:SC0[0]:HE1:SE1] takes:
   (&amp;inode-&gt;inotify_mutex){+.+.?.}, at: [&lt;ffffffff8112f1b5&gt;] inotify_inode_is_dead+0x35/0xb0
  {RECLAIM_FS-ON-W} state was registered at:
    [&lt;ffffffff81079188&gt;] mark_held_locks+0x68/0x90
    [&lt;ffffffff810792a5&gt;] lockdep_trace_alloc+0xf5/0x100
    [&lt;ffffffff810f5261&gt;] __kmalloc_node+0x31/0x1e0
    [&lt;ffffffff81130652&gt;] kernel_event+0xe2/0x190
    [&lt;ffffffff81130826&gt;] inotify_dev_queue_event+0x126/0x230
    [&lt;ffffffff8112f096&gt;] inotify_inode_queue_event+0xc6/0x110
    [&lt;ffffffff8110444d&gt;] vfs_create+0xcd/0x140
    [&lt;ffffffff8110825d&gt;] do_filp_open+0x88d/0xa20
    [&lt;ffffffff810f6b68&gt;] do_sys_open+0x98/0x140
    [&lt;ffffffff810f6c50&gt;] sys_open+0x20/0x30
    [&lt;ffffffff8100c272&gt;] system_call_fastpath+0x16/0x1b
    [&lt;ffffffffffffffff&gt;] 0xffffffffffffffff
  irq event stamp: 690455
  hardirqs last  enabled at (690455): [&lt;ffffffff81564fe4&gt;] _spin_unlock_irqrestore+0x44/0x80
  hardirqs last disabled at (690454): [&lt;ffffffff81565372&gt;] _spin_lock_irqsave+0x32/0xa0
  softirqs last  enabled at (690178): [&lt;ffffffff81052282&gt;] __do_softirq+0x202/0x220
  softirqs last disabled at (690157): [&lt;ffffffff8100d50c&gt;] call_softirq+0x1c/0x50

  other info that might help us debug this:
  2 locks held by kswapd0/380:
   #0:  (shrinker_rwsem){++++..}, at: [&lt;ffffffff810d0bd7&gt;] shrink_slab+0x37/0x180
   #1:  (&amp;type-&gt;s_umount_key#17){++++..}, at: [&lt;ffffffff8110cfbf&gt;] shrink_dcache_memory+0x11f/0x1e0

  stack backtrace:
  Pid: 380, comm: kswapd0 Not tainted 2.6.30-rc2-next-20090417 #203
  Call Trace:
   [&lt;ffffffff810789ef&gt;] print_usage_bug+0x19f/0x200
   [&lt;ffffffff81018bff&gt;] ? save_stack_trace+0x2f/0x50
   [&lt;ffffffff81078f0b&gt;] mark_lock+0x4bb/0x6d0
   [&lt;ffffffff810799e0&gt;] ? check_usage_forwards+0x0/0xc0
   [&lt;ffffffff8107b142&gt;] __lock_acquire+0xc62/0x1ae0
   [&lt;ffffffff810f478c&gt;] ? slob_free+0x10c/0x370
   [&lt;ffffffff8107c0a1&gt;] lock_acquire+0xe1/0x120
   [&lt;ffffffff8112f1b5&gt;] ? inotify_inode_is_dead+0x35/0xb0
   [&lt;ffffffff81562d43&gt;] mutex_lock_nested+0x63/0x420
   [&lt;ffffffff8112f1b5&gt;] ? inotify_inode_is_dead+0x35/0xb0
   [&lt;ffffffff8112f1b5&gt;] ? inotify_inode_is_dead+0x35/0xb0
   [&lt;ffffffff81012fe9&gt;] ? sched_clock+0x9/0x10
   [&lt;ffffffff81077165&gt;] ? lock_release_holdtime+0x35/0x1c0
   [&lt;ffffffff8112f1b5&gt;] inotify_inode_is_dead+0x35/0xb0
   [&lt;ffffffff8110c9dc&gt;] dentry_iput+0xbc/0xe0
   [&lt;ffffffff8110cb23&gt;] d_kill+0x33/0x60
   [&lt;ffffffff8110ce23&gt;] __shrink_dcache_sb+0x2d3/0x350
   [&lt;ffffffff8110cffa&gt;] shrink_dcache_memory+0x15a/0x1e0
   [&lt;ffffffff810d0cc5&gt;] shrink_slab+0x125/0x180
   [&lt;ffffffff810d1540&gt;] kswapd+0x560/0x7a0
   [&lt;ffffffff810ce160&gt;] ? isolate_pages_global+0x0/0x2c0
   [&lt;ffffffff81065a30&gt;] ? autoremove_wake_function+0x0/0x40
   [&lt;ffffffff8107953d&gt;] ? trace_hardirqs_on+0xd/0x10
   [&lt;ffffffff810d0fe0&gt;] ? kswapd+0x0/0x7a0
   [&lt;ffffffff8106555b&gt;] kthread+0x5b/0xa0
   [&lt;ffffffff8100d40a&gt;] child_rip+0xa/0x20
   [&lt;ffffffff8100cdd0&gt;] ? restore_args+0x0/0x30
   [&lt;ffffffff81065500&gt;] ? kthread+0x0/0xa0
   [&lt;ffffffff8100d400&gt;] ? child_rip+0x0/0x20

[eparis@redhat.com: fix audit too]
Cc: Al Viro &lt;viro@zeniv.linux.org.uk&gt;
Cc: Matt Mackall &lt;mpm@selenic.com&gt;
Cc: Christoph Lameter &lt;clameter@sgi.com&gt;
Signed-off-by: Wu Fengguang &lt;fengguang.wu@intel.com&gt;
Signed-off-by: Eric Paris &lt;eparis@redhat.com&gt;
Cc: Peter Zijlstra &lt;a.p.zijlstra@chello.nl&gt;
Signed-off-by: Andrew Morton &lt;akpm@linux-foundation.org&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@linux-foundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
There is what we believe to be a false positive reported by lockdep.

inotify_inode_queue_event() =&gt; take inotify_mutex =&gt; kernel_event() =&gt;
kmalloc() =&gt; SLOB =&gt; alloc_pages_node() =&gt; page reclaim =&gt; slab reclaim =&gt;
dcache reclaim =&gt; inotify_inode_is_dead =&gt; take inotify_mutex =&gt; deadlock

The plan is to fix this via lockdep annotation, but that is proving to be
quite involved.

The patch flips the allocation over to GFP_NFS to shut the warning up, for
the 2.6.30 release.

Hopefully we will fix this for real in 2.6.31.  I'll queue a patch in -mm
to switch it back to GFP_KERNEL so we don't forget.

  =================================
  [ INFO: inconsistent lock state ]
  2.6.30-rc2-next-20090417 #203
  ---------------------------------
  inconsistent {RECLAIM_FS-ON-W} -&gt; {IN-RECLAIM_FS-W} usage.
  kswapd0/380 [HC0[0]:SC0[0]:HE1:SE1] takes:
   (&amp;inode-&gt;inotify_mutex){+.+.?.}, at: [&lt;ffffffff8112f1b5&gt;] inotify_inode_is_dead+0x35/0xb0
  {RECLAIM_FS-ON-W} state was registered at:
    [&lt;ffffffff81079188&gt;] mark_held_locks+0x68/0x90
    [&lt;ffffffff810792a5&gt;] lockdep_trace_alloc+0xf5/0x100
    [&lt;ffffffff810f5261&gt;] __kmalloc_node+0x31/0x1e0
    [&lt;ffffffff81130652&gt;] kernel_event+0xe2/0x190
    [&lt;ffffffff81130826&gt;] inotify_dev_queue_event+0x126/0x230
    [&lt;ffffffff8112f096&gt;] inotify_inode_queue_event+0xc6/0x110
    [&lt;ffffffff8110444d&gt;] vfs_create+0xcd/0x140
    [&lt;ffffffff8110825d&gt;] do_filp_open+0x88d/0xa20
    [&lt;ffffffff810f6b68&gt;] do_sys_open+0x98/0x140
    [&lt;ffffffff810f6c50&gt;] sys_open+0x20/0x30
    [&lt;ffffffff8100c272&gt;] system_call_fastpath+0x16/0x1b
    [&lt;ffffffffffffffff&gt;] 0xffffffffffffffff
  irq event stamp: 690455
  hardirqs last  enabled at (690455): [&lt;ffffffff81564fe4&gt;] _spin_unlock_irqrestore+0x44/0x80
  hardirqs last disabled at (690454): [&lt;ffffffff81565372&gt;] _spin_lock_irqsave+0x32/0xa0
  softirqs last  enabled at (690178): [&lt;ffffffff81052282&gt;] __do_softirq+0x202/0x220
  softirqs last disabled at (690157): [&lt;ffffffff8100d50c&gt;] call_softirq+0x1c/0x50

  other info that might help us debug this:
  2 locks held by kswapd0/380:
   #0:  (shrinker_rwsem){++++..}, at: [&lt;ffffffff810d0bd7&gt;] shrink_slab+0x37/0x180
   #1:  (&amp;type-&gt;s_umount_key#17){++++..}, at: [&lt;ffffffff8110cfbf&gt;] shrink_dcache_memory+0x11f/0x1e0

  stack backtrace:
  Pid: 380, comm: kswapd0 Not tainted 2.6.30-rc2-next-20090417 #203
  Call Trace:
   [&lt;ffffffff810789ef&gt;] print_usage_bug+0x19f/0x200
   [&lt;ffffffff81018bff&gt;] ? save_stack_trace+0x2f/0x50
   [&lt;ffffffff81078f0b&gt;] mark_lock+0x4bb/0x6d0
   [&lt;ffffffff810799e0&gt;] ? check_usage_forwards+0x0/0xc0
   [&lt;ffffffff8107b142&gt;] __lock_acquire+0xc62/0x1ae0
   [&lt;ffffffff810f478c&gt;] ? slob_free+0x10c/0x370
   [&lt;ffffffff8107c0a1&gt;] lock_acquire+0xe1/0x120
   [&lt;ffffffff8112f1b5&gt;] ? inotify_inode_is_dead+0x35/0xb0
   [&lt;ffffffff81562d43&gt;] mutex_lock_nested+0x63/0x420
   [&lt;ffffffff8112f1b5&gt;] ? inotify_inode_is_dead+0x35/0xb0
   [&lt;ffffffff8112f1b5&gt;] ? inotify_inode_is_dead+0x35/0xb0
   [&lt;ffffffff81012fe9&gt;] ? sched_clock+0x9/0x10
   [&lt;ffffffff81077165&gt;] ? lock_release_holdtime+0x35/0x1c0
   [&lt;ffffffff8112f1b5&gt;] inotify_inode_is_dead+0x35/0xb0
   [&lt;ffffffff8110c9dc&gt;] dentry_iput+0xbc/0xe0
   [&lt;ffffffff8110cb23&gt;] d_kill+0x33/0x60
   [&lt;ffffffff8110ce23&gt;] __shrink_dcache_sb+0x2d3/0x350
   [&lt;ffffffff8110cffa&gt;] shrink_dcache_memory+0x15a/0x1e0
   [&lt;ffffffff810d0cc5&gt;] shrink_slab+0x125/0x180
   [&lt;ffffffff810d1540&gt;] kswapd+0x560/0x7a0
   [&lt;ffffffff810ce160&gt;] ? isolate_pages_global+0x0/0x2c0
   [&lt;ffffffff81065a30&gt;] ? autoremove_wake_function+0x0/0x40
   [&lt;ffffffff8107953d&gt;] ? trace_hardirqs_on+0xd/0x10
   [&lt;ffffffff810d0fe0&gt;] ? kswapd+0x0/0x7a0
   [&lt;ffffffff8106555b&gt;] kthread+0x5b/0xa0
   [&lt;ffffffff8100d40a&gt;] child_rip+0xa/0x20
   [&lt;ffffffff8100cdd0&gt;] ? restore_args+0x0/0x30
   [&lt;ffffffff81065500&gt;] ? kthread+0x0/0xa0
   [&lt;ffffffff8100d400&gt;] ? child_rip+0x0/0x20

[eparis@redhat.com: fix audit too]
Cc: Al Viro &lt;viro@zeniv.linux.org.uk&gt;
Cc: Matt Mackall &lt;mpm@selenic.com&gt;
Cc: Christoph Lameter &lt;clameter@sgi.com&gt;
Signed-off-by: Wu Fengguang &lt;fengguang.wu@intel.com&gt;
Signed-off-by: Eric Paris &lt;eparis@redhat.com&gt;
Cc: Peter Zijlstra &lt;a.p.zijlstra@chello.nl&gt;
Signed-off-by: Andrew Morton &lt;akpm@linux-foundation.org&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@linux-foundation.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>[CIFS] Allow raw ntlmssp code to be enabled with sec=ntlmssp</title>
<updated>2009-05-06T04:16:04+00:00</updated>
<author>
<name>Steve French</name>
<email>sfrench@us.ibm.com</email>
</author>
<published>2009-05-06T04:16:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=ac68392460ffefed13020967bae04edc4d3add06'/>
<id>ac68392460ffefed13020967bae04edc4d3add06</id>
<content type='text'>
On mount, "sec=ntlmssp" can now be specified to allow
"rawntlmssp" security to be enabled during
CIFS session establishment/authentication (ntlmssp used to
require specifying krb5 which was counterintuitive).

Signed-off-by: Steve French &lt;sfrench@us.ibm.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
On mount, "sec=ntlmssp" can now be specified to allow
"rawntlmssp" security to be enabled during
CIFS session establishment/authentication (ntlmssp used to
require specifying krb5 which was counterintuitive).

Signed-off-by: Steve French &lt;sfrench@us.ibm.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>[CIFS] Fix SMB uid in NTLMSSP authenticate request</title>
<updated>2009-05-06T00:48:30+00:00</updated>
<author>
<name>Steve French</name>
<email>sfrench@us.ibm.com</email>
</author>
<published>2009-05-06T00:48:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=844823cb822932d2c599abf38692e3d6a5b5a320'/>
<id>844823cb822932d2c599abf38692e3d6a5b5a320</id>
<content type='text'>
We were not setting the SMB uid in NTLMSSP authenticate
request which could lead to INVALID_PARAMETER error
on 2nd session setup.

Signed-off-by: Steve French &lt;sfrench@us.ibm.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We were not setting the SMB uid in NTLMSSP authenticate
request which could lead to INVALID_PARAMETER error
on 2nd session setup.

Signed-off-by: Steve French &lt;sfrench@us.ibm.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>proc: avoid information leaks to non-privileged processes</title>
<updated>2009-05-04T22:14:23+00:00</updated>
<author>
<name>Jake Edge</name>
<email>jake@lwn.net</email>
</author>
<published>2009-05-04T18:51:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=f83ce3e6b02d5e48b3a43b001390e2b58820389d'/>
<id>f83ce3e6b02d5e48b3a43b001390e2b58820389d</id>
<content type='text'>
By using the same test as is used for /proc/pid/maps and /proc/pid/smaps,
only allow processes that can ptrace() a given process to see information
that might be used to bypass address space layout randomization (ASLR).
These include eip, esp, wchan, and start_stack in /proc/pid/stat as well
as the non-symbolic output from /proc/pid/wchan.

ASLR can be bypassed by sampling eip as shown by the proof-of-concept
code at http://code.google.com/p/fuzzyaslr/ As part of a presentation
(http://www.cr0.org/paper/to-jt-linux-alsr-leak.pdf) esp and wchan were
also noted as possibly usable information leaks as well.  The
start_stack address also leaks potentially useful information.

Cc: Stable Team &lt;stable@kernel.org&gt;
Signed-off-by: Jake Edge &lt;jake@lwn.net&gt;
Acked-by: Arjan van de Ven &lt;arjan@linux.intel.com&gt;
Acked-by: "Eric W. Biederman" &lt;ebiederm@xmission.com&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@linux-foundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
By using the same test as is used for /proc/pid/maps and /proc/pid/smaps,
only allow processes that can ptrace() a given process to see information
that might be used to bypass address space layout randomization (ASLR).
These include eip, esp, wchan, and start_stack in /proc/pid/stat as well
as the non-symbolic output from /proc/pid/wchan.

ASLR can be bypassed by sampling eip as shown by the proof-of-concept
code at http://code.google.com/p/fuzzyaslr/ As part of a presentation
(http://www.cr0.org/paper/to-jt-linux-alsr-leak.pdf) esp and wchan were
also noted as possibly usable information leaks as well.  The
start_stack address also leaks potentially useful information.

Cc: Stable Team &lt;stable@kernel.org&gt;
Signed-off-by: Jake Edge &lt;jake@lwn.net&gt;
Acked-by: Arjan van de Ven &lt;arjan@linux.intel.com&gt;
Acked-by: "Eric W. Biederman" &lt;ebiederm@xmission.com&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@linux-foundation.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>[CIFS] NTLMSSP reenabled after move from connect.c to sess.c</title>
<updated>2009-05-04T08:37:12+00:00</updated>
<author>
<name>Steve French</name>
<email>sfrench@us.ibm.com</email>
</author>
<published>2009-05-04T08:37:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=0b3cc858003b79b6c66ad79415ead907cbe4074e'/>
<id>0b3cc858003b79b6c66ad79415ead907cbe4074e</id>
<content type='text'>
The NTLMSSP code was removed from fs/cifs/connect.c and merged
(75% smaller, cleaner) into fs/cifs/sess.c

As with the old code it requires that cifs be built with
CONFIG_CIFS_EXPERIMENTAL, the /proc/fs/cifs/Experimental flag
must be set to 2, and mount must turn on extended security
(e.g. with sec=krb5).

Although NTLMSSP encapsulated in SPNEGO is not enabled yet,
"raw" ntlmssp is common and useful in some cases since it
offers more complete security negotiation, and is the
default way of negotiating security for many Windows systems.
SPNEGO encapsulated NTLMSSP will be able to reuse the same
code.

Signed-off-by: Steve French &lt;sfrench@us.ibm.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The NTLMSSP code was removed from fs/cifs/connect.c and merged
(75% smaller, cleaner) into fs/cifs/sess.c

As with the old code it requires that cifs be built with
CONFIG_CIFS_EXPERIMENTAL, the /proc/fs/cifs/Experimental flag
must be set to 2, and mount must turn on extended security
(e.g. with sec=krb5).

Although NTLMSSP encapsulated in SPNEGO is not enabled yet,
"raw" ntlmssp is common and useful in some cases since it
offers more complete security negotiation, and is the
default way of negotiating security for many Windows systems.
SPNEGO encapsulated NTLMSSP will be able to reuse the same
code.

Signed-off-by: Steve French &lt;sfrench@us.ibm.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>NFS: Close page_mkwrite() races</title>
<updated>2009-05-03T02:42:39+00:00</updated>
<author>
<name>Trond Myklebust</name>
<email>Trond.Myklebust@netapp.com</email>
</author>
<published>2009-04-24T21:32:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=7fdf523067666b0eaff330f362401ee50ce187c4'/>
<id>7fdf523067666b0eaff330f362401ee50ce187c4</id>
<content type='text'>
Follow up to Nick Piggin's patches to ensure that nfs_vm_page_mkwrite
returns with the page lock held, and sets the VM_FAULT_LOCKED flag.

See http://bugzilla.kernel.org/show_bug.cgi?id=12913

Signed-off-by: Trond Myklebust &lt;Trond.Myklebust@netapp.com&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@linux-foundation.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Follow up to Nick Piggin's patches to ensure that nfs_vm_page_mkwrite
returns with the page lock held, and sets the VM_FAULT_LOCKED flag.

See http://bugzilla.kernel.org/show_bug.cgi?id=12913

Signed-off-by: Trond Myklebust &lt;Trond.Myklebust@netapp.com&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@linux-foundation.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'for-linus' of git://oss.sgi.com/xfs/xfs</title>
<updated>2009-05-02T23:52:50+00:00</updated>
<author>
<name>Linus Torvalds</name>
<email>torvalds@linux-foundation.org</email>
</author>
<published>2009-05-02T23:52:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.toradex.cn/cgit/linux-toradex.git/commit/?id=b4348f32dae3cb6eb4bc21c7ed8f76c0b11e9d6a'/>
<id>b4348f32dae3cb6eb4bc21c7ed8f76c0b11e9d6a</id>
<content type='text'>
* 'for-linus' of git://oss.sgi.com/xfs/xfs:
  xfs: fix getbmap vs mmap deadlock
  xfs: a couple getbmap cleanups
  xfs: add more checks to superblock validation
  xfs_file_last_byte() needs to acquire ilock
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* 'for-linus' of git://oss.sgi.com/xfs/xfs:
  xfs: fix getbmap vs mmap deadlock
  xfs: a couple getbmap cleanups
  xfs: add more checks to superblock validation
  xfs_file_last_byte() needs to acquire ilock
</pre>
</div>
</content>
</entry>
</feed>
