Please pull the following changes since commit 707a63e9a9dd55432d47bf40457d4a3413888dcc: Merge tag '5.15-rc1-ksmbd' of git://git.samba.org/ksmbd (2021-09-20 15:35:17 -0700) are available in the Git repository at: git://git.samba.org/ksmbd.git tags/5.15-rc2-ksmbd-fixes for you to fetch changes up to 265fd1991c1db85fbabaad4946ca0e63e2ae688d: ksmbd: use LOOKUP_BENEATH to prevent the out of share access (2021-09-24 21:25:23 -0500) ---------------------------------------------------------------- Five fixes for the ksmbd kernel server, including three security fixes: - removing follow symlinks support - converting to use LOOKUP_BENEATH to prevent out of share access - SMB3 compounding security fix -fix for returning the default streams correctly, fixing a bug when writing ppt or doc files from some clients - logging more clearly that ksmbd is experimental (at module load time) Functional testing passed (e.g. http://smb3-test-rhel-75.southcentralus.cloudapp.azure.com/#/builders/8/builds/73). Additional patches are being reviewed, addressing the remaining potential overflows found in the security reviews. ---------------------------------------------------------------- Hyunchul Lee (1): ksmbd: use LOOKUP_BENEATH to prevent the out of share access Namjae Jeon (3): ksmbd: add default data stream name in FILE_STREAM_INFORMATION ksmbd: check protocol id in ksmbd_verify_smb_message() ksmbd: remove follow symlinks support Steve French (1): ksmbd: log that server is experimental at module load fs/ksmbd/misc.c | 100 ++++++++--------------------------------- fs/ksmbd/misc.h | 7 +-- fs/ksmbd/server.c | 3 ++ fs/ksmbd/smb2pdu.c | 119 ++++++++++++++++-------------------------------- fs/ksmbd/smb_common.c | 13 ++++-- fs/ksmbd/smb_common.h | 1 + fs/ksmbd/vfs.c | 172 ++++++++++++++++++++++++++++++++++------------------------------------ fs/ksmbd/vfs.h | 9 +++- 8 files changed, 164 insertions(+), 260 deletions(-) -- Thanks, Steve
