Received: by 2002:a05:6902:102b:0:0:0:0 with SMTP id x11csp1350940ybt; Tue, 7 Jul 2020 13:39:14 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxIKVBo39mx7TaTptaV1b2ILTrHMr2mYv8eRbi/INWU2hMVatLL7GPm50+b9/C8z2SlK1o+ X-Received: by 2002:a50:e8c9:: with SMTP id l9mr55754354edn.272.1594154353931; Tue, 07 Jul 2020 13:39:13 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1594154353; cv=none; d=google.com; s=arc-20160816; b=uFIHM+hcfscxux1n2DASxpOjPhlwElU2J0bAx9XkSzfwkowqAhtZTxpGNCyTZrI9BK RejcA7Kdh+j9nDKVZPPASm38WpOEIQtQ5UTnXZxmVXtGTQFOohjYJYamovLjqRZvroTW QsTwUiNx9Vq2FvKr4AtkLSBoVggKNDxlZRxqJId0pSA9lSNLzWFrVTwksgqqH6LgtdQF IYB4bYOFEHBhtQYuQjKn2R6htF5sxIIn1Kgn88l8emwV1kMHV/gdVyTdO7gOTUzSmbu4 ldJYd8tJirkry0tf1XTV2DnUzSrastRTkB2RQMkn8JTRAmyCcAFJDfY8BOo5Wzp7oIOB uk7g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding :content-language:in-reply-to:mime-version:user-agent:date :message-id:organization:from:references:to:subject; bh=9qva5cy8ppYqYIyZvDPqvQYeMfMKurS2w21ueO+pOXY=; b=Fv6cU9a0oLxwv53PH22cWn56ZNtpeF4dA5oAvYg0GDg416ozpPVJ9/K18AiyoMVvf2 A1y34Cl6KnyAIu6OA0Dvn2x+x8LOACr/56qwCIC6WF8zPldw4prPBTS53rk/g1ISv7NQ GnXJASZM+3kus4+ZRaNHsC5fkjSNkK15Uppb2GM9uNtzZCJHYCiacZAG8CRIiN0RZXKO /2nlx7H4IPC5f60oKMg+L8AsAOHciYQ87WTglhm0HUjju322E+LSU/G/10kZypHD5JLm vr/60ry+8iNVF3g8UpaH63N87JSCGofps+pOBdyl75z1Yrze/p2R77ruLga3/UfEBm5K 3E1A== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id y97si17786226ede.234.2020.07.07.13.38.51; Tue, 07 Jul 2020 13:39:13 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728841AbgGGUhR (ORCPT + 99 others); Tue, 7 Jul 2020 16:37:17 -0400 Received: from ivanoab7.miniserver.com ([37.128.132.42]:58292 "EHLO www.kot-begemot.co.uk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727995AbgGGUhR (ORCPT ); Tue, 7 Jul 2020 16:37:17 -0400 Received: from tun252.jain.kot-begemot.co.uk ([192.168.18.6] helo=jain.kot-begemot.co.uk) by www.kot-begemot.co.uk with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jsuKy-0005md-NI; Tue, 07 Jul 2020 20:37:09 +0000 Received: from madding.kot-begemot.co.uk ([192.168.3.98]) by jain.kot-begemot.co.uk with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1jsuKw-0007dV-Pc; Tue, 07 Jul 2020 21:37:08 +0100 Subject: Re: [PATCH] Replace HTTP links with HTTPS ones: user-mode Linux To: "Alexander A. Klimov" , jdike@addtoit.com, richard@nod.at, corbet@lwn.net, johannes.berg@intel.com, brendanhiggins@google.com, erelx.geron@intel.com, linux@roeck-us.net, arnd@arndb.de, linux-um@lists.infradead.org, linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org References: <20200707203246.53158-1-grandmaster@al2klimov.de> From: Anton Ivanov Organization: Cambridge Greys Message-ID: <1d1838b0-91f6-e821-32f6-abb8d497cd74@cambridgegreys.com> Date: Tue, 7 Jul 2020 21:37:06 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <20200707203246.53158-1-grandmaster@al2klimov.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Spam-Score: -1.0 X-Spam-Score: -1.0 X-Clacks-Overhead: GNU Terry Pratchett Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 07/07/2020 21:32, Alexander A. Klimov wrote: > Rationale: > Reduces attack surface on kernel devs opening the links for MITM > as HTTPS traffic is much harder to manipulate. > > Deterministic algorithm: > For each file: > If not .svg: > For each line: > If doesn't contain `\bxmlns\b`: > For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`: > If both the HTTP and HTTPS versions > return 200 OK and serve the same content: > Replace HTTP with HTTPS. > > Signed-off-by: Alexander A. Klimov > --- > Continuing my work started at 93431e0607e5. > See also: git log --oneline '--author=Alexander A. Klimov ' v5.7..master > > If there are any URLs to be removed completely or at least not HTTPSified: > Just clearly say so and I'll *undo my change*. > See also: https://lkml.org/lkml/2020/6/27/64 > > If there are any valid, but yet not changed URLs: > See: https://lkml.org/lkml/2020/6/26/837 > > If you apply the patch, please let me know. > Rationale: > I'd like not to submit patches much faster than you maintainers apply them. > > Documentation/virt/uml/user_mode_linux.rst | 2 +- > arch/um/drivers/Kconfig | 2 +- > arch/um/drivers/harddog_kern.c | 2 +- > 3 files changed, 3 insertions(+), 3 deletions(-) > > diff --git a/Documentation/virt/uml/user_mode_linux.rst b/Documentation/virt/uml/user_mode_linux.rst > index de0f0b2c9d5b..775d3de84331 100644 > --- a/Documentation/virt/uml/user_mode_linux.rst > +++ b/Documentation/virt/uml/user_mode_linux.rst > @@ -3753,7 +3753,7 @@ Note: > > > Documentation on IP Masquerading, and SNAT, can be found at > - http://www.netfilter.org. > + https://www.netfilter.org. > > > If you can reach the local net, but not the outside Internet, then > diff --git a/arch/um/drivers/Kconfig b/arch/um/drivers/Kconfig > index 9160ead56e33..85e170149e99 100644 > --- a/arch/um/drivers/Kconfig > +++ b/arch/um/drivers/Kconfig > @@ -259,7 +259,7 @@ config UML_NET_VDE > To use this form of networking, you will need to run vde_switch > on the host. > > - For more information, see > + For more information, see > That site has a good overview of what VDE is and also examples > of the UML command line to use to enable VDE networking. > > diff --git a/arch/um/drivers/harddog_kern.c b/arch/um/drivers/harddog_kern.c > index e6d4f43deba8..7a39b8b7ae55 100644 > --- a/arch/um/drivers/harddog_kern.c > +++ b/arch/um/drivers/harddog_kern.c > @@ -3,7 +3,7 @@ > * SoftDog 0.05: A Software Watchdog Device > * > * (c) Copyright 1996 Alan Cox , All Rights Reserved. > - * http://www.redhat.com > + * https://www.redhat.com > * > * This program is free software; you can redistribute it and/or > * modify it under the terms of the GNU General Public License > We should really try to finish the new documentation. The one in the kernel tree is very out of date. The draft is here: https://github.com/kot-begemot-uk/uml-howto-v2 -- Anton R. Ivanov Cambridgegreys Limited. Registered in England. Company Number 10273661 https://www.cambridgegreys.com/