Merge tag 'ksmbd-for-7.4-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb

Pull smb server updates from Namjae Jeon:

 - Validate EA-name NUL termination to prevent out-of-bounds reads in
   debug logging. Return STATUS_EA_LIST_INCONSISTENT for malformed EA
   names in CREATE and SET_INFO requests.

 - Grant the owner's implicit READ_CONTROL and WRITE_DAC rights when no
   ACE names it, including MAXIMUM_ALLOWED handling, while respecting
   applicable OWNER RIGHTS ACEs.

 - Check group membership before granting permissions from a POSIX ACL
   group entry, preventing unintended access when a caller's UID matches
   the group's numeric GID.

 - Avoid reading past the DACL when logging an access denial by printing
   the requested and allowed access masks instead.

 - Handle unauthenticated sessions in procfs reporting without
   dereferencing a NULL session->user.

 - Fix credential cleanup on attribute lookup failures during durable
   handle reconnect or request replay, preventing subsequent requests
   from running with another user's credentials.

 - Fix read-only share handling for named stream creation, including
   AFP_AfpInfo synthesis on Time Machine shares.

 - Validate DELETE access for FILE_DELETE_ON_CLOSE opens, including
   MAXIMUM_ALLOWED handling, to prevent unauthorized deletion or
   delete-pending states.

* tag 'ksmbd-for-7.4-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb:
  ksmbd: require NUL-terminated EA names
  ksmbd: let the owner read and change the DACL when no ACE names it
  ksmbd: grant a POSIX ACL group entry only to the group's members
  ksmbd: do not read past the DACL in the access denied debug message
  ksmbd: fix NULL pointer dereference in session_user_name() and session_account_type()
  ksmbd: revert fsids on durable reconnect and replay failure
  ksmbd: enforce the read-only share flag when creating a stream
  ksmbd: require DELETE access for delete-on-close opens

0 files changed, 0 insertions, 0 deletions