2020-07-06 17:42:13

by Alexander A. Klimov

[permalink] [raw]
Subject: [PATCH] Replace HTTP links with HTTPS ones: QNX4

Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.

Deterministic algorithm:
For each file:
If not .svg:
For each line:
If doesn't contain `\bxmlns\b`:
For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
If both the HTTP and HTTPS versions
return 200 OK and serve the same content:
Replace HTTP with HTTPS.

Signed-off-by: Alexander A. Klimov <[email protected]>
---
Continuing my work started at 93431e0607e5.

If there are any URLs to be removed completely or at least not HTTPSified:
Just clearly say so and I'll *undo my change*.
See also https://lkml.org/lkml/2020/6/27/64

If there are any valid, but yet not changed URLs:
See https://lkml.org/lkml/2020/6/26/837

fs/qnx4/Kconfig | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fs/qnx4/Kconfig b/fs/qnx4/Kconfig
index 45b5b98376c4..6ba0e5a1303f 100644
--- a/fs/qnx4/Kconfig
+++ b/fs/qnx4/Kconfig
@@ -5,7 +5,7 @@ config QNX4FS_FS
help
This is the file system used by the real-time operating systems
QNX 4 and QNX 6 (the latter is also called QNX RTP).
- Further information is available at <http://www.qnx.com/>.
+ Further information is available at <https://www.qnx.com/>.
Say Y if you intend to mount QNX hard disks or floppies.

To compile this file system support as a module, choose M here: the
--
2.27.0


2020-07-06 20:26:03

by Anders Larsen

[permalink] [raw]
Subject: Re: [PATCH] Replace HTTP links with HTTPS ones: QNX4

On Monday, 2020-07-06 19:39 Alexander A. Klimov wrote:
> Rationale:
> Reduces attack surface on kernel devs opening the links for MITM
> as HTTPS traffic is much harder to manipulate.
>
> Deterministic algorithm:
> For each file:
> If not .svg:
> For each line:
> If doesn't contain `\bxmlns\b`:
> For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
> If both the HTTP and HTTPS versions
> return 200 OK and serve the same content:
> Replace HTTP with HTTPS.
>
> Signed-off-by: Alexander A. Klimov <[email protected]>
> ---
> Continuing my work started at 93431e0607e5.
>
> If there are any URLs to be removed completely or at least not HTTPSified:
> Just clearly say so and I'll *undo my change*.
> See also https://lkml.org/lkml/2020/6/27/64
>
> If there are any valid, but yet not changed URLs:
> See https://lkml.org/lkml/2020/6/26/837
>
> fs/qnx4/Kconfig | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/fs/qnx4/Kconfig b/fs/qnx4/Kconfig
> index 45b5b98376c4..6ba0e5a1303f 100644
> --- a/fs/qnx4/Kconfig
> +++ b/fs/qnx4/Kconfig
> @@ -5,7 +5,7 @@ config QNX4FS_FS
> help
> This is the file system used by the real-time operating systems
> QNX 4 and QNX 6 (the latter is also called QNX RTP).
> - Further information is available at <http://www.qnx.com/>.
> + Further information is available at <https://www.qnx.com/>.
> Say Y if you intend to mount QNX hard disks or floppies.
>
> To compile this file system support as a module, choose M here: the

Acked-by: Anders Larsen <[email protected]>