diff options
| author | Steve French <sfrench@us.ibm.com> | 2007-10-04 20:05:09 +0000 |
|---|---|---|
| committer | Steve French <sfrench@us.ibm.com> | 2007-10-04 20:05:09 +0000 |
| commit | a013689ddb2a4ba5f0452c053c0bf00bafb686f1 (patch) | |
| tree | daffe3644ed321b602a1f6a4e97dc6c6ef329dfb /fs/cifs/cifs_debug.c | |
| parent | d12fd121afd4f87cbc7675f8f6b651d649534f15 (diff) | |
| download | linux-3.10-a013689ddb2a4ba5f0452c053c0bf00bafb686f1.tar.gz linux-3.10-a013689ddb2a4ba5f0452c053c0bf00bafb686f1.tar.bz2 linux-3.10-a013689ddb2a4ba5f0452c053c0bf00bafb686f1.zip | |
[CIFS] Fix cifsd so shuts down when signing fails during mount
Fixes two problems:
1) we dropped down to negotiating lanman if we did not recognize the
mechanism (krb5 e.g.)
2) we did not stop cifsd (thus will fail when doing rmod cifs with
slab free errors) when we fail tcon but have a bad session (which is
the case in which signing is required but we don't allow signing on
the client)
It also turns on extended security flag in the header when passing
"sec=krb5" on mount command (although kerberos support is not done of
course)
Acked-by: Jeff Layton <jlayton@redhat.com>
CC: Shaggy <shaggy@us.ibm.com>
Signed-off-by: Steve French <sfrench@us.ibm.com>
Diffstat (limited to 'fs/cifs/cifs_debug.c')
| -rw-r--r-- | fs/cifs/cifs_debug.c | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/fs/cifs/cifs_debug.c b/fs/cifs/cifs_debug.c index 56c5d9126f5..73c4c419663 100644 --- a/fs/cifs/cifs_debug.c +++ b/fs/cifs/cifs_debug.c @@ -879,11 +879,16 @@ security_flags_write(struct file *file, const char __user *buffer, if (count < 3) { /* single char or single char followed by null */ c = flags_string[0]; - if (c == '0' || c == 'n' || c == 'N') + if (c == '0' || c == 'n' || c == 'N') { extended_security = CIFSSEC_DEF; /* default */ - else if (c == '1' || c == 'y' || c == 'Y') + return count; + } else if (c == '1' || c == 'y' || c == 'Y') { extended_security = CIFSSEC_MAX; - return count; + return count; + } else if (!isdigit(c)) { + cERROR(1, ("invalid flag %c", c)); + return -EINVAL; + } } /* else we have a number */ |