OpenSDV
/
original_kernel
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ocxl: Replace HTTP links with HTTPS ones 

Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.

Deterministic algorithm:
For each file:
  If not .svg:
    For each line:
      If doesn't contain `\bxmlns\b`:
        For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
	  If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`:
            If both the HTTP and HTTPS versions
            return 200 OK and serve the same content:
              Replace HTTP with HTTPS.

Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Acked-by: Andrew Donnellan <ajd@linux.ibm.com>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/20200713175506.36676-1-grandmaster@al2klimov.de
This commit is contained in:
Alexander A. Klimov 2020-07-13 19:55:06 +02:00 committed by Michael Ellerman
parent 92fe8483b1
commit 07497137a5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/misc/ocxl/Kconfig
View File

@ -23,7 +23,7 @@ config OCXL
The ocxl driver enables userspace programs to access these The ocxl driver enables userspace programs to access these
accelerators through devices in /dev/ocxl/. accelerators through devices in /dev/ocxl/.
For more information, see http://opencapi.org. For more information, see https://opencapi.org.
This is not to be confused with the support for IBM CAPI This is not to be confused with the support for IBM CAPI
accelerators (CONFIG_CXL), which are PCI-based instead of a accelerators (CONFIG_CXL), which are PCI-based instead of a