* [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide
@ 2020-06-22 18:19 Alexander A. Klimov
2020-06-22 18:38 ` Jonathan Neuschäfer
0 siblings, 1 reply; 8+ messages in thread
From: Alexander A. Klimov @ 2020-06-22 18:19 UTC (permalink / raw)
To: Jonathan Corbet, Steven Rostedt (VMware),
Masahiro Yamada, Changbin Du, Alexander A. Klimov,
Jonathan Neuschäfer, Logan Gunthorpe, Cornelia Huck,
Mauro Carvalho Chehab, Colin Ian King, Ian Abbott, Jacob Keller,
Greg Kroah-Hartman, Mark Greer, Theodore Ts'o, Eric Biggers,
Jan Kara, Thomas Gleixner, Andrew Morton, Paul E. McKenney,
Pawan Gupta, Juergen Gross, Mike Kravetz, Oliver Neukum,
Andy Shevchenko, Jacek Anaszewski, Pavel Machek,
Alexander Schremmer, Daniel W. S. Almeida, David Sterba,
linux-doc, linux-kernel
Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.
Deterministic algorithm:
For each file:
If not .svg:
For each line:
If doesn't contain `\bxmlns\b`:
For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
If both the HTTP and HTTPS versions
return 200 OK and serve the same content:
Replace HTTP with HTTPS.
Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
---
Documentation/admin-guide/README.rst | 4 ++--
Documentation/admin-guide/dell_rbu.rst | 2 +-
Documentation/admin-guide/devices.txt | 6 +++---
Documentation/admin-guide/ext4.rst | 4 ++--
Documentation/admin-guide/kernel-parameters.txt | 2 +-
Documentation/admin-guide/laptops/disk-shock-protection.rst | 2 +-
Documentation/admin-guide/laptops/sonypi.rst | 2 +-
Documentation/admin-guide/laptops/thinkpad-acpi.rst | 6 +++---
Documentation/admin-guide/mm/ksm.rst | 2 +-
Documentation/admin-guide/nfs/nfs-client.rst | 4 ++--
Documentation/admin-guide/nfs/nfs-rdma.rst | 2 +-
Documentation/admin-guide/nfs/nfsroot.rst | 6 +++---
Documentation/admin-guide/sysctl/fs.rst | 2 +-
13 files changed, 22 insertions(+), 22 deletions(-)
diff --git a/Documentation/admin-guide/README.rst b/Documentation/admin-guide/README.rst
index 5fb526900023..d9e7f7117850 100644
--- a/Documentation/admin-guide/README.rst
+++ b/Documentation/admin-guide/README.rst
@@ -1,7 +1,7 @@
.. _readme:
-Linux kernel release 5.x <http://kernel.org/>
-=============================================
+Linux kernel release 5.x <https://kernel.org/>
+==============================================
These are the release notes for Linux version 5. Read them carefully,
as they tell you what this is all about, explain how to install the
diff --git a/Documentation/admin-guide/dell_rbu.rst b/Documentation/admin-guide/dell_rbu.rst
index 8d70e1fc9f9d..2196caf1b939 100644
--- a/Documentation/admin-guide/dell_rbu.rst
+++ b/Documentation/admin-guide/dell_rbu.rst
@@ -26,7 +26,7 @@ Please go to http://support.dell.com register and you can find info on
OpenManage and Dell Update packages (DUP).
Libsmbios can also be used to update BIOS on Dell systems go to
-http://linux.dell.com/libsmbios/ for details.
+https://linux.dell.com/libsmbios/ for details.
Dell_RBU driver supports BIOS update using the monolithic image and packetized
image methods. In case of monolithic the driver allocates a contiguous chunk
diff --git a/Documentation/admin-guide/devices.txt b/Documentation/admin-guide/devices.txt
index 2a97aaec8b12..a622dfec92a4 100644
--- a/Documentation/admin-guide/devices.txt
+++ b/Documentation/admin-guide/devices.txt
@@ -1442,7 +1442,7 @@
...
The driver and documentation may be obtained from
- http://www.winradio.com/
+ https://www.winradio.com/
82 block I2O hard disk
0 = /dev/i2o/hdag 33rd I2O hard disk, whole disk
@@ -1656,7 +1656,7 @@
dynamically, so there is no fixed mapping from subdevice
pathnames to minor numbers.
- See http://www.comedi.org/ for information about the Comedi
+ See https://www.comedi.org/ for information about the Comedi
project.
98 block User-mode virtual block device
@@ -1723,7 +1723,7 @@
implementations a kernel presence for caching and easy
mounting. For more information about the project,
write to <arla-drinkers@stacken.kth.se> or see
- http://www.stacken.kth.se/project/arla/
+ https://www.stacken.kth.se/project/arla/
103 block Audit device
0 = /dev/audit Audit device
diff --git a/Documentation/admin-guide/ext4.rst b/Documentation/admin-guide/ext4.rst
index 9443fcef1876..bc3abfb33476 100644
--- a/Documentation/admin-guide/ext4.rst
+++ b/Documentation/admin-guide/ext4.rst
@@ -611,7 +611,7 @@ kernel source: <file:fs/ext4/>
programs: http://e2fsprogs.sourceforge.net/
-useful links: http://fedoraproject.org/wiki/ext3-devel
+useful links: https://fedoraproject.org/wiki/ext3-devel
http://www.bullopensource.org/ext4/
http://ext4.wiki.kernel.org/index.php/Main_Page
- http://fedoraproject.org/wiki/Features/Ext4
+ https://fedoraproject.org/wiki/Features/Ext4
diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt
index fb95fad81c79..b333ba5cb144 100644
--- a/Documentation/admin-guide/kernel-parameters.txt
+++ b/Documentation/admin-guide/kernel-parameters.txt
@@ -2786,7 +2786,7 @@
touchscreen support is not enabled in the mainstream
kernel as of 2.6.30, a preliminary port can be found
in the "bleeding edge" mini2440 support kernel at
- http://repo.or.cz/w/linux-2.6/mini2440.git
+ https://repo.or.cz/w/linux-2.6/mini2440.git
mitigations=
[X86,PPC,S390,ARM64] Control optional mitigations for
diff --git a/Documentation/admin-guide/laptops/disk-shock-protection.rst b/Documentation/admin-guide/laptops/disk-shock-protection.rst
index e97c5f78d8c3..22c7ec3e84cf 100644
--- a/Documentation/admin-guide/laptops/disk-shock-protection.rst
+++ b/Documentation/admin-guide/laptops/disk-shock-protection.rst
@@ -135,7 +135,7 @@ single project which, although still considered experimental, is fit
for use. Please feel free to add projects that have been the victims
of my ignorance.
-- http://www.thinkwiki.org/wiki/HDAPS
+- https://www.thinkwiki.org/wiki/HDAPS
See this page for information about Linux support of the hard disk
active protection system as implemented in IBM/Lenovo Thinkpads.
diff --git a/Documentation/admin-guide/laptops/sonypi.rst b/Documentation/admin-guide/laptops/sonypi.rst
index c6eaaf48f7c1..190da1234314 100644
--- a/Documentation/admin-guide/laptops/sonypi.rst
+++ b/Documentation/admin-guide/laptops/sonypi.rst
@@ -151,7 +151,7 @@ Bugs:
different way to adjust the backlighting of the screen. There
is a userspace utility to adjust the brightness on those models,
which can be downloaded from
- http://www.acc.umu.se/~erikw/program/smartdimmer-0.1.tar.bz2
+ https://www.acc.umu.se/~erikw/program/smartdimmer-0.1.tar.bz2
- since all development was done by reverse engineering, there is
*absolutely no guarantee* that this driver will not crash your
diff --git a/Documentation/admin-guide/laptops/thinkpad-acpi.rst b/Documentation/admin-guide/laptops/thinkpad-acpi.rst
index 822907dcc845..69b7ce905cba 100644
--- a/Documentation/admin-guide/laptops/thinkpad-acpi.rst
+++ b/Documentation/admin-guide/laptops/thinkpad-acpi.rst
@@ -904,7 +904,7 @@ temperatures:
The mapping of thermal sensors to physical locations varies depending on
system-board model (and thus, on ThinkPad model).
-http://thinkwiki.org/wiki/Thermal_Sensors is a public wiki page that
+https://thinkwiki.org/wiki/Thermal_Sensors is a public wiki page that
tries to track down these locations for various models.
Most (newer?) models seem to follow this pattern:
@@ -925,7 +925,7 @@ For the R51 (source: Thomas Gruber):
- 3: Internal HDD
For the T43, T43/p (source: Shmidoax/Thinkwiki.org)
-http://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_T43.2C_T43p
+https://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_T43.2C_T43p
- 2: System board, left side (near PCMCIA slot), reported as HDAPS temp
- 3: PCMCIA slot
@@ -935,7 +935,7 @@ http://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_T43.2C_T43p
- 11: Power regulator, underside of system board, below F2 key
The A31 has a very atypical layout for the thermal sensors
-(source: Milos Popovic, http://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_A31)
+(source: Milos Popovic, https://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_A31)
- 1: CPU
- 2: Main Battery: main sensor
diff --git a/Documentation/admin-guide/mm/ksm.rst b/Documentation/admin-guide/mm/ksm.rst
index 874eb0c77d34..e87bf0135edf 100644
--- a/Documentation/admin-guide/mm/ksm.rst
+++ b/Documentation/admin-guide/mm/ksm.rst
@@ -9,7 +9,7 @@ Overview
KSM is a memory-saving de-duplication feature, enabled by CONFIG_KSM=y,
added to the Linux kernel in 2.6.32. See ``mm/ksm.c`` for its implementation,
-and http://lwn.net/Articles/306704/ and http://lwn.net/Articles/330589/
+and http://lwn.net/Articles/306704/ and https://lwn.net/Articles/330589/
KSM was originally developed for use with KVM (where it was known as
Kernel Shared Memory), to fit more virtual machines into physical memory,
diff --git a/Documentation/admin-guide/nfs/nfs-client.rst b/Documentation/admin-guide/nfs/nfs-client.rst
index c4b777c7584b..6adb6457bc69 100644
--- a/Documentation/admin-guide/nfs/nfs-client.rst
+++ b/Documentation/admin-guide/nfs/nfs-client.rst
@@ -65,8 +65,8 @@ migrated onto another server by means of the special "fs_locations"
attribute. See `RFC3530 Section 6: Filesystem Migration and Replication`_ and
`Implementation Guide for Referrals in NFSv4`_.
-.. _RFC3530 Section 6\: Filesystem Migration and Replication: http://tools.ietf.org/html/rfc3530#section-6
-.. _Implementation Guide for Referrals in NFSv4: http://tools.ietf.org/html/draft-ietf-nfsv4-referrals-00
+.. _RFC3530 Section 6\: Filesystem Migration and Replication: https://tools.ietf.org/html/rfc3530#section-6
+.. _Implementation Guide for Referrals in NFSv4: https://tools.ietf.org/html/draft-ietf-nfsv4-referrals-00
The fs_locations information can take the form of either an ip address and
a path, or a DNS hostname and a path. The latter requires the NFS client to
diff --git a/Documentation/admin-guide/nfs/nfs-rdma.rst b/Documentation/admin-guide/nfs/nfs-rdma.rst
index ef0f3678b1fb..f137485f8bde 100644
--- a/Documentation/admin-guide/nfs/nfs-rdma.rst
+++ b/Documentation/admin-guide/nfs/nfs-rdma.rst
@@ -65,7 +65,7 @@ use with NFS/RDMA.
If the version is less than 1.1.2 or the command does not exist,
you should install the latest version of nfs-utils.
- Download the latest package from: http://www.kernel.org/pub/linux/utils/nfs
+ Download the latest package from: https://www.kernel.org/pub/linux/utils/nfs
Uncompress the package and follow the installation instructions.
diff --git a/Documentation/admin-guide/nfs/nfsroot.rst b/Documentation/admin-guide/nfs/nfsroot.rst
index c6772075c80c..135218f33394 100644
--- a/Documentation/admin-guide/nfs/nfsroot.rst
+++ b/Documentation/admin-guide/nfs/nfsroot.rst
@@ -264,7 +264,7 @@ They depend on various facilities being available:
access to the floppy drive device, /dev/fd0
For more information on syslinux, including how to create bootdisks
- for prebuilt kernels, see http://syslinux.zytor.com/
+ for prebuilt kernels, see https://syslinux.zytor.com/
.. note::
Previously it was possible to write a kernel directly to
@@ -292,7 +292,7 @@ They depend on various facilities being available:
cdrecord dev=ATAPI:1,0,0 arch/x86/boot/image.iso
For more information on isolinux, including how to create bootdisks
- for prebuilt kernels, see http://syslinux.zytor.com/
+ for prebuilt kernels, see https://syslinux.zytor.com/
- Using LILO
@@ -346,7 +346,7 @@ They depend on various facilities being available:
see Documentation/admin-guide/serial-console.rst for more information.
For more information on isolinux, including how to create bootdisks
- for prebuilt kernels, see http://syslinux.zytor.com/
+ for prebuilt kernels, see https://syslinux.zytor.com/
diff --git a/Documentation/admin-guide/sysctl/fs.rst b/Documentation/admin-guide/sysctl/fs.rst
index 2a45119e3331..f48277a0a850 100644
--- a/Documentation/admin-guide/sysctl/fs.rst
+++ b/Documentation/admin-guide/sysctl/fs.rst
@@ -261,7 +261,7 @@ directories like /tmp. The common method of exploitation of this flaw
is to cross privilege boundaries when following a given symlink (i.e. a
root process follows a symlink belonging to another user). For a likely
incomplete list of hundreds of examples across the years, please see:
-http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=/tmp
+https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=/tmp
When set to "0", symlink following behavior is unrestricted.
--
2.27.0
^ permalink raw reply related [flat|nested] 8+ messages in thread
* Re: [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide
2020-06-22 18:19 [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide Alexander A. Klimov
@ 2020-06-22 18:38 ` Jonathan Neuschäfer
0 siblings, 0 replies; 8+ messages in thread
From: Jonathan Neuschäfer @ 2020-06-22 18:38 UTC (permalink / raw)
To: Alexander A. Klimov
Cc: Jonathan Corbet, Steven Rostedt (VMware),
Masahiro Yamada, Changbin Du, Jonathan Neuschäfer,
Logan Gunthorpe, Cornelia Huck, Mauro Carvalho Chehab,
Colin Ian King, Ian Abbott, Jacob Keller, Greg Kroah-Hartman,
Mark Greer, Theodore Ts'o, Eric Biggers, Jan Kara,
Thomas Gleixner, Andrew Morton, Paul E. McKenney, Pawan Gupta,
Juergen Gross, Mike Kravetz, Oliver Neukum, Andy Shevchenko,
Jacek Anaszewski, Pavel Machek, Alexander Schremmer,
Daniel W. S. Almeida, David Sterba, linux-doc, linux-kernel
[-- Attachment #1: Type: text/plain, Size: 486 bytes --]
>Subject: [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide
You already sent a patch with the exact same subject line.
Please use an incrementing version number (PATCH v2, PATCH v3, etc.) for
revised versions of a patch, and describe the differences below the ---
line. This is (somewhat lengthily) explained here:
https://www.kernel.org/doc/html/latest/process/submitting-patches.html#the-canonical-patch-format
Best regards,
Jonathan Neuschäfer
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide
2020-06-26 17:02 ` Jonathan Corbet
@ 2020-06-26 19:18 ` Alexander A. Klimov
0 siblings, 0 replies; 8+ messages in thread
From: Alexander A. Klimov @ 2020-06-26 19:18 UTC (permalink / raw)
To: Jonathan Corbet
Cc: changbin.du, masahiroy, rostedt, j.neuschaefer, andy.shevchenko,
mchehab+samsung, logang, abbotti, jacob.e.keller, colin.king,
gregkh, mgreer, tytso, jack, ebiggers, tglx, akpm, paulmck,
pawan.kumar.gupta, jgross, mike.kravetz, cohuck,
jacek.anaszewski, pavel, alex, dwlsalmeida, dsterba, linux-doc,
linux-kernel
Am 26.06.20 um 19:02 schrieb Jonathan Corbet:
> On Sun, 21 Jun 2020 15:20:49 +0200
> "Alexander A. Klimov" <grandmaster@al2klimov.de> wrote:
>
> So for this one ...
>
>> diff --git a/Documentation/admin-guide/README.rst b/Documentation/admin-guide/README.rst
>> index 5fb526900023..7186ed9b42fe 100644
>> --- a/Documentation/admin-guide/README.rst
>> +++ b/Documentation/admin-guide/README.rst
>> @@ -1,6 +1,6 @@
>> .. _readme:
>>
>> -Linux kernel release 5.x <http://kernel.org/>
>> +Linux kernel release 5.x <https://kernel.org/>
>> =============================================
>
> I'd really rather just take that URL out of there, it makes no sense in the
> heading.
>
> [...]
>
>> index 9443fcef1876..bc3abfb33476 100644
>> --- a/Documentation/admin-guide/ext4.rst
>> +++ b/Documentation/admin-guide/ext4.rst
>> @@ -611,7 +611,7 @@ kernel source: <file:fs/ext4/>
>>
>> programs: http://e2fsprogs.sourceforge.net/
>>
>> -useful links: http://fedoraproject.org/wiki/ext3-devel
>> +useful links: https://fedoraproject.org/wiki/ext3-devel
>> http://www.bullopensource.org/ext4/
>
> This link looks pretty obviously dead, you should just take it out while
> you're in the neighborhood.
>
>> http://ext4.wiki.kernel.org/index.php/Main_Page
>
> And this one already redirects to https, is there a reason why you didn't
> change it?
>
>> index fb95fad81c79..b333ba5cb144 100644
>> --- a/Documentation/admin-guide/kernel-parameters.txt
>> +++ b/Documentation/admin-guide/kernel-parameters.txt
>> @@ -2786,7 +2786,7 @@
>> touchscreen support is not enabled in the mainstream
>> kernel as of 2.6.30, a preliminary port can be found
>> in the "bleeding edge" mini2440 support kernel at
>> - http://repo.or.cz/w/linux-2.6/mini2440.git
>> + https://repo.or.cz/w/linux-2.6/mini2440.git
>
> A repo that hasn't seen a commit since 2009 doesn't quite qualify as
> "bleeding edge" IMO, but I guess we can let that one slide...:)
>
>
>> index 874eb0c77d34..e87bf0135edf 100644
>> --- a/Documentation/admin-guide/mm/ksm.rst
>> +++ b/Documentation/admin-guide/mm/ksm.rst
>> @@ -9,7 +9,7 @@ Overview
>>
>> KSM is a memory-saving de-duplication feature, enabled by CONFIG_KSM=y,
>> added to the Linux kernel in 2.6.32. See ``mm/ksm.c`` for its implementation,
>> -and http://lwn.net/Articles/306704/ and http://lwn.net/Articles/330589/
>> +and http://lwn.net/Articles/306704/ and https://lwn.net/Articles/330589/
>
> Why did you only change one of those?
>
> Thanks,
>
> jon
>
Regarding the not changed URLs:
I ran the algo once and now I'm submitting the results.
The kernel tree changes ways faster that the patches are merged (and
it's absolutely OK for me) so new URLs appear from time to time.
As I've already said in another thread I'd like to get in the "big
fish"[1] first *and then* re-hunt the newly added stuff.
TL;DR - *if* the URL (and all similar cases) falls under my algo, I'll
submit another patch one nice day - OK?
Regarding the others:
I'll submit a patch v2.
[1]
➜ linux git:(master) git stash show --shortstat
1857 files changed, 2664 insertions(+), 2664 deletions(-)
➜ linux git:(master)
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide
2020-06-21 13:20 Alexander A. Klimov
2020-06-21 22:04 ` Pavel Machek
@ 2020-06-26 17:02 ` Jonathan Corbet
2020-06-26 19:18 ` Alexander A. Klimov
1 sibling, 1 reply; 8+ messages in thread
From: Jonathan Corbet @ 2020-06-26 17:02 UTC (permalink / raw)
To: Alexander A. Klimov
Cc: changbin.du, masahiroy, rostedt, j.neuschaefer, andy.shevchenko,
mchehab+samsung, logang, abbotti, jacob.e.keller, colin.king,
gregkh, mgreer, tytso, jack, ebiggers, tglx, akpm, paulmck,
pawan.kumar.gupta, jgross, mike.kravetz, cohuck,
jacek.anaszewski, pavel, alex, dwlsalmeida, dsterba, linux-doc,
linux-kernel
On Sun, 21 Jun 2020 15:20:49 +0200
"Alexander A. Klimov" <grandmaster@al2klimov.de> wrote:
So for this one ...
> diff --git a/Documentation/admin-guide/README.rst b/Documentation/admin-guide/README.rst
> index 5fb526900023..7186ed9b42fe 100644
> --- a/Documentation/admin-guide/README.rst
> +++ b/Documentation/admin-guide/README.rst
> @@ -1,6 +1,6 @@
> .. _readme:
>
> -Linux kernel release 5.x <http://kernel.org/>
> +Linux kernel release 5.x <https://kernel.org/>
> =============================================
I'd really rather just take that URL out of there, it makes no sense in the
heading.
[...]
> index 9443fcef1876..bc3abfb33476 100644
> --- a/Documentation/admin-guide/ext4.rst
> +++ b/Documentation/admin-guide/ext4.rst
> @@ -611,7 +611,7 @@ kernel source: <file:fs/ext4/>
>
> programs: http://e2fsprogs.sourceforge.net/
>
> -useful links: http://fedoraproject.org/wiki/ext3-devel
> +useful links: https://fedoraproject.org/wiki/ext3-devel
> http://www.bullopensource.org/ext4/
This link looks pretty obviously dead, you should just take it out while
you're in the neighborhood.
> http://ext4.wiki.kernel.org/index.php/Main_Page
And this one already redirects to https, is there a reason why you didn't
change it?
> index fb95fad81c79..b333ba5cb144 100644
> --- a/Documentation/admin-guide/kernel-parameters.txt
> +++ b/Documentation/admin-guide/kernel-parameters.txt
> @@ -2786,7 +2786,7 @@
> touchscreen support is not enabled in the mainstream
> kernel as of 2.6.30, a preliminary port can be found
> in the "bleeding edge" mini2440 support kernel at
> - http://repo.or.cz/w/linux-2.6/mini2440.git
> + https://repo.or.cz/w/linux-2.6/mini2440.git
A repo that hasn't seen a commit since 2009 doesn't quite qualify as
"bleeding edge" IMO, but I guess we can let that one slide...:)
> index 874eb0c77d34..e87bf0135edf 100644
> --- a/Documentation/admin-guide/mm/ksm.rst
> +++ b/Documentation/admin-guide/mm/ksm.rst
> @@ -9,7 +9,7 @@ Overview
>
> KSM is a memory-saving de-duplication feature, enabled by CONFIG_KSM=y,
> added to the Linux kernel in 2.6.32. See ``mm/ksm.c`` for its implementation,
> -and http://lwn.net/Articles/306704/ and http://lwn.net/Articles/330589/
> +and http://lwn.net/Articles/306704/ and https://lwn.net/Articles/330589/
Why did you only change one of those?
Thanks,
jon
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide
2020-06-21 22:04 ` Pavel Machek
2020-06-22 13:14 ` Jonathan Corbet
@ 2020-06-22 18:17 ` Alexander A. Klimov
1 sibling, 0 replies; 8+ messages in thread
From: Alexander A. Klimov @ 2020-06-22 18:17 UTC (permalink / raw)
To: Pavel Machek
Cc: corbet, changbin.du, masahiroy, rostedt, j.neuschaefer,
andy.shevchenko, mchehab+samsung, logang, abbotti,
jacob.e.keller, colin.king, gregkh, mgreer, tytso, jack,
ebiggers, tglx, akpm, paulmck, pawan.kumar.gupta, jgross,
mike.kravetz, cohuck, jacek.anaszewski, alex, dwlsalmeida,
dsterba, linux-doc, linux-kernel
Am 22.06.20 um 00:04 schrieb Pavel Machek:
> Hi!
>
>> Rationale:
>> Reduces attack surface on kernel devs opening the links for MITM
>> as HTTPS traffic is much harder to manipulate.
>
>> +++ b/Documentation/admin-guide/README.rst
>> @@ -1,6 +1,6 @@
>> .. _readme:
>>
>> -Linux kernel release 5.x <http://kernel.org/>
>> +Linux kernel release 5.x <https://kernel.org/>
>> =============================================
>>
>
> You need to add one "=" here, IIRC.
OK, forget this mail thread. I've corrected this and am going to submit
a replacement patch.
> Pavel
>
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide
2020-06-21 22:04 ` Pavel Machek
@ 2020-06-22 13:14 ` Jonathan Corbet
2020-06-22 18:17 ` Alexander A. Klimov
1 sibling, 0 replies; 8+ messages in thread
From: Jonathan Corbet @ 2020-06-22 13:14 UTC (permalink / raw)
To: Pavel Machek
Cc: Alexander A. Klimov, changbin.du, masahiroy, rostedt,
j.neuschaefer, andy.shevchenko, mchehab+samsung, logang, abbotti,
jacob.e.keller, colin.king, gregkh, mgreer, tytso, jack,
ebiggers, tglx, akpm, paulmck, pawan.kumar.gupta, jgross,
mike.kravetz, cohuck, jacek.anaszewski, alex, dwlsalmeida,
dsterba, linux-doc, linux-kernel
On Mon, 22 Jun 2020 00:04:32 +0200
Pavel Machek <pavel@denx.de> wrote:
> > Rationale:
> > Reduces attack surface on kernel devs opening the links for MITM
> > as HTTPS traffic is much harder to manipulate.
>
> > +++ b/Documentation/admin-guide/README.rst
> > @@ -1,6 +1,6 @@
> > .. _readme:
> >
> > -Linux kernel release 5.x <http://kernel.org/>
> > +Linux kernel release 5.x <https://kernel.org/>
> > =============================================
> >
>
> You need to add one "=" here, IIRC.
Or just remove the URL from the subheading entirely, it does not really
serve any purpose there.
jon
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide
2020-06-21 13:20 Alexander A. Klimov
@ 2020-06-21 22:04 ` Pavel Machek
2020-06-22 13:14 ` Jonathan Corbet
2020-06-22 18:17 ` Alexander A. Klimov
2020-06-26 17:02 ` Jonathan Corbet
1 sibling, 2 replies; 8+ messages in thread
From: Pavel Machek @ 2020-06-21 22:04 UTC (permalink / raw)
To: Alexander A. Klimov
Cc: corbet, changbin.du, masahiroy, rostedt, j.neuschaefer,
andy.shevchenko, mchehab+samsung, logang, abbotti,
jacob.e.keller, colin.king, gregkh, mgreer, tytso, jack,
ebiggers, tglx, akpm, paulmck, pawan.kumar.gupta, jgross,
mike.kravetz, cohuck, jacek.anaszewski, alex, dwlsalmeida,
dsterba, linux-doc, linux-kernel
[-- Attachment #1: Type: text/plain, Size: 575 bytes --]
Hi!
> Rationale:
> Reduces attack surface on kernel devs opening the links for MITM
> as HTTPS traffic is much harder to manipulate.
> +++ b/Documentation/admin-guide/README.rst
> @@ -1,6 +1,6 @@
> .. _readme:
>
> -Linux kernel release 5.x <http://kernel.org/>
> +Linux kernel release 5.x <https://kernel.org/>
> =============================================
>
You need to add one "=" here, IIRC.
Pavel
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 181 bytes --]
^ permalink raw reply [flat|nested] 8+ messages in thread
* [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide
@ 2020-06-21 13:20 Alexander A. Klimov
2020-06-21 22:04 ` Pavel Machek
2020-06-26 17:02 ` Jonathan Corbet
0 siblings, 2 replies; 8+ messages in thread
From: Alexander A. Klimov @ 2020-06-21 13:20 UTC (permalink / raw)
To: corbet, changbin.du, masahiroy, rostedt, j.neuschaefer,
andy.shevchenko, mchehab+samsung, logang, abbotti,
jacob.e.keller, colin.king, gregkh, mgreer, tytso, jack,
ebiggers, tglx, akpm, paulmck, pawan.kumar.gupta, jgross,
mike.kravetz, cohuck, jacek.anaszewski, pavel, alex, dwlsalmeida,
dsterba, linux-doc, linux-kernel
Cc: Alexander A. Klimov
Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.
Deterministic algorithm:
For each file:
If not .svg:
For each line:
If doesn't contain `\bxmlns\b`:
For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
If both the HTTP and HTTPS versions
return 200 OK and serve the same content:
Replace HTTP with HTTPS.
Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
---
Documentation/admin-guide/README.rst | 2 +-
Documentation/admin-guide/dell_rbu.rst | 2 +-
Documentation/admin-guide/devices.txt | 6 +++---
Documentation/admin-guide/ext4.rst | 4 ++--
Documentation/admin-guide/kernel-parameters.txt | 2 +-
Documentation/admin-guide/laptops/disk-shock-protection.rst | 2 +-
Documentation/admin-guide/laptops/sonypi.rst | 2 +-
Documentation/admin-guide/laptops/thinkpad-acpi.rst | 6 +++---
Documentation/admin-guide/mm/ksm.rst | 2 +-
Documentation/admin-guide/nfs/nfs-client.rst | 4 ++--
Documentation/admin-guide/nfs/nfs-rdma.rst | 2 +-
Documentation/admin-guide/nfs/nfsroot.rst | 6 +++---
Documentation/admin-guide/sysctl/fs.rst | 2 +-
13 files changed, 21 insertions(+), 21 deletions(-)
diff --git a/Documentation/admin-guide/README.rst b/Documentation/admin-guide/README.rst
index 5fb526900023..7186ed9b42fe 100644
--- a/Documentation/admin-guide/README.rst
+++ b/Documentation/admin-guide/README.rst
@@ -1,6 +1,6 @@
.. _readme:
-Linux kernel release 5.x <http://kernel.org/>
+Linux kernel release 5.x <https://kernel.org/>
=============================================
These are the release notes for Linux version 5. Read them carefully,
diff --git a/Documentation/admin-guide/dell_rbu.rst b/Documentation/admin-guide/dell_rbu.rst
index 8d70e1fc9f9d..2196caf1b939 100644
--- a/Documentation/admin-guide/dell_rbu.rst
+++ b/Documentation/admin-guide/dell_rbu.rst
@@ -26,7 +26,7 @@ Please go to http://support.dell.com register and you can find info on
OpenManage and Dell Update packages (DUP).
Libsmbios can also be used to update BIOS on Dell systems go to
-http://linux.dell.com/libsmbios/ for details.
+https://linux.dell.com/libsmbios/ for details.
Dell_RBU driver supports BIOS update using the monolithic image and packetized
image methods. In case of monolithic the driver allocates a contiguous chunk
diff --git a/Documentation/admin-guide/devices.txt b/Documentation/admin-guide/devices.txt
index 2a97aaec8b12..a622dfec92a4 100644
--- a/Documentation/admin-guide/devices.txt
+++ b/Documentation/admin-guide/devices.txt
@@ -1442,7 +1442,7 @@
...
The driver and documentation may be obtained from
- http://www.winradio.com/
+ https://www.winradio.com/
82 block I2O hard disk
0 = /dev/i2o/hdag 33rd I2O hard disk, whole disk
@@ -1656,7 +1656,7 @@
dynamically, so there is no fixed mapping from subdevice
pathnames to minor numbers.
- See http://www.comedi.org/ for information about the Comedi
+ See https://www.comedi.org/ for information about the Comedi
project.
98 block User-mode virtual block device
@@ -1723,7 +1723,7 @@
implementations a kernel presence for caching and easy
mounting. For more information about the project,
write to <arla-drinkers@stacken.kth.se> or see
- http://www.stacken.kth.se/project/arla/
+ https://www.stacken.kth.se/project/arla/
103 block Audit device
0 = /dev/audit Audit device
diff --git a/Documentation/admin-guide/ext4.rst b/Documentation/admin-guide/ext4.rst
index 9443fcef1876..bc3abfb33476 100644
--- a/Documentation/admin-guide/ext4.rst
+++ b/Documentation/admin-guide/ext4.rst
@@ -611,7 +611,7 @@ kernel source: <file:fs/ext4/>
programs: http://e2fsprogs.sourceforge.net/
-useful links: http://fedoraproject.org/wiki/ext3-devel
+useful links: https://fedoraproject.org/wiki/ext3-devel
http://www.bullopensource.org/ext4/
http://ext4.wiki.kernel.org/index.php/Main_Page
- http://fedoraproject.org/wiki/Features/Ext4
+ https://fedoraproject.org/wiki/Features/Ext4
diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt
index fb95fad81c79..b333ba5cb144 100644
--- a/Documentation/admin-guide/kernel-parameters.txt
+++ b/Documentation/admin-guide/kernel-parameters.txt
@@ -2786,7 +2786,7 @@
touchscreen support is not enabled in the mainstream
kernel as of 2.6.30, a preliminary port can be found
in the "bleeding edge" mini2440 support kernel at
- http://repo.or.cz/w/linux-2.6/mini2440.git
+ https://repo.or.cz/w/linux-2.6/mini2440.git
mitigations=
[X86,PPC,S390,ARM64] Control optional mitigations for
diff --git a/Documentation/admin-guide/laptops/disk-shock-protection.rst b/Documentation/admin-guide/laptops/disk-shock-protection.rst
index e97c5f78d8c3..22c7ec3e84cf 100644
--- a/Documentation/admin-guide/laptops/disk-shock-protection.rst
+++ b/Documentation/admin-guide/laptops/disk-shock-protection.rst
@@ -135,7 +135,7 @@ single project which, although still considered experimental, is fit
for use. Please feel free to add projects that have been the victims
of my ignorance.
-- http://www.thinkwiki.org/wiki/HDAPS
+- https://www.thinkwiki.org/wiki/HDAPS
See this page for information about Linux support of the hard disk
active protection system as implemented in IBM/Lenovo Thinkpads.
diff --git a/Documentation/admin-guide/laptops/sonypi.rst b/Documentation/admin-guide/laptops/sonypi.rst
index c6eaaf48f7c1..190da1234314 100644
--- a/Documentation/admin-guide/laptops/sonypi.rst
+++ b/Documentation/admin-guide/laptops/sonypi.rst
@@ -151,7 +151,7 @@ Bugs:
different way to adjust the backlighting of the screen. There
is a userspace utility to adjust the brightness on those models,
which can be downloaded from
- http://www.acc.umu.se/~erikw/program/smartdimmer-0.1.tar.bz2
+ https://www.acc.umu.se/~erikw/program/smartdimmer-0.1.tar.bz2
- since all development was done by reverse engineering, there is
*absolutely no guarantee* that this driver will not crash your
diff --git a/Documentation/admin-guide/laptops/thinkpad-acpi.rst b/Documentation/admin-guide/laptops/thinkpad-acpi.rst
index 822907dcc845..69b7ce905cba 100644
--- a/Documentation/admin-guide/laptops/thinkpad-acpi.rst
+++ b/Documentation/admin-guide/laptops/thinkpad-acpi.rst
@@ -904,7 +904,7 @@ temperatures:
The mapping of thermal sensors to physical locations varies depending on
system-board model (and thus, on ThinkPad model).
-http://thinkwiki.org/wiki/Thermal_Sensors is a public wiki page that
+https://thinkwiki.org/wiki/Thermal_Sensors is a public wiki page that
tries to track down these locations for various models.
Most (newer?) models seem to follow this pattern:
@@ -925,7 +925,7 @@ For the R51 (source: Thomas Gruber):
- 3: Internal HDD
For the T43, T43/p (source: Shmidoax/Thinkwiki.org)
-http://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_T43.2C_T43p
+https://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_T43.2C_T43p
- 2: System board, left side (near PCMCIA slot), reported as HDAPS temp
- 3: PCMCIA slot
@@ -935,7 +935,7 @@ http://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_T43.2C_T43p
- 11: Power regulator, underside of system board, below F2 key
The A31 has a very atypical layout for the thermal sensors
-(source: Milos Popovic, http://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_A31)
+(source: Milos Popovic, https://thinkwiki.org/wiki/Thermal_Sensors#ThinkPad_A31)
- 1: CPU
- 2: Main Battery: main sensor
diff --git a/Documentation/admin-guide/mm/ksm.rst b/Documentation/admin-guide/mm/ksm.rst
index 874eb0c77d34..e87bf0135edf 100644
--- a/Documentation/admin-guide/mm/ksm.rst
+++ b/Documentation/admin-guide/mm/ksm.rst
@@ -9,7 +9,7 @@ Overview
KSM is a memory-saving de-duplication feature, enabled by CONFIG_KSM=y,
added to the Linux kernel in 2.6.32. See ``mm/ksm.c`` for its implementation,
-and http://lwn.net/Articles/306704/ and http://lwn.net/Articles/330589/
+and http://lwn.net/Articles/306704/ and https://lwn.net/Articles/330589/
KSM was originally developed for use with KVM (where it was known as
Kernel Shared Memory), to fit more virtual machines into physical memory,
diff --git a/Documentation/admin-guide/nfs/nfs-client.rst b/Documentation/admin-guide/nfs/nfs-client.rst
index c4b777c7584b..6adb6457bc69 100644
--- a/Documentation/admin-guide/nfs/nfs-client.rst
+++ b/Documentation/admin-guide/nfs/nfs-client.rst
@@ -65,8 +65,8 @@ migrated onto another server by means of the special "fs_locations"
attribute. See `RFC3530 Section 6: Filesystem Migration and Replication`_ and
`Implementation Guide for Referrals in NFSv4`_.
-.. _RFC3530 Section 6\: Filesystem Migration and Replication: http://tools.ietf.org/html/rfc3530#section-6
-.. _Implementation Guide for Referrals in NFSv4: http://tools.ietf.org/html/draft-ietf-nfsv4-referrals-00
+.. _RFC3530 Section 6\: Filesystem Migration and Replication: https://tools.ietf.org/html/rfc3530#section-6
+.. _Implementation Guide for Referrals in NFSv4: https://tools.ietf.org/html/draft-ietf-nfsv4-referrals-00
The fs_locations information can take the form of either an ip address and
a path, or a DNS hostname and a path. The latter requires the NFS client to
diff --git a/Documentation/admin-guide/nfs/nfs-rdma.rst b/Documentation/admin-guide/nfs/nfs-rdma.rst
index ef0f3678b1fb..f137485f8bde 100644
--- a/Documentation/admin-guide/nfs/nfs-rdma.rst
+++ b/Documentation/admin-guide/nfs/nfs-rdma.rst
@@ -65,7 +65,7 @@ use with NFS/RDMA.
If the version is less than 1.1.2 or the command does not exist,
you should install the latest version of nfs-utils.
- Download the latest package from: http://www.kernel.org/pub/linux/utils/nfs
+ Download the latest package from: https://www.kernel.org/pub/linux/utils/nfs
Uncompress the package and follow the installation instructions.
diff --git a/Documentation/admin-guide/nfs/nfsroot.rst b/Documentation/admin-guide/nfs/nfsroot.rst
index c6772075c80c..135218f33394 100644
--- a/Documentation/admin-guide/nfs/nfsroot.rst
+++ b/Documentation/admin-guide/nfs/nfsroot.rst
@@ -264,7 +264,7 @@ They depend on various facilities being available:
access to the floppy drive device, /dev/fd0
For more information on syslinux, including how to create bootdisks
- for prebuilt kernels, see http://syslinux.zytor.com/
+ for prebuilt kernels, see https://syslinux.zytor.com/
.. note::
Previously it was possible to write a kernel directly to
@@ -292,7 +292,7 @@ They depend on various facilities being available:
cdrecord dev=ATAPI:1,0,0 arch/x86/boot/image.iso
For more information on isolinux, including how to create bootdisks
- for prebuilt kernels, see http://syslinux.zytor.com/
+ for prebuilt kernels, see https://syslinux.zytor.com/
- Using LILO
@@ -346,7 +346,7 @@ They depend on various facilities being available:
see Documentation/admin-guide/serial-console.rst for more information.
For more information on isolinux, including how to create bootdisks
- for prebuilt kernels, see http://syslinux.zytor.com/
+ for prebuilt kernels, see https://syslinux.zytor.com/
diff --git a/Documentation/admin-guide/sysctl/fs.rst b/Documentation/admin-guide/sysctl/fs.rst
index 2a45119e3331..f48277a0a850 100644
--- a/Documentation/admin-guide/sysctl/fs.rst
+++ b/Documentation/admin-guide/sysctl/fs.rst
@@ -261,7 +261,7 @@ directories like /tmp. The common method of exploitation of this flaw
is to cross privilege boundaries when following a given symlink (i.e. a
root process follows a symlink belonging to another user). For a likely
incomplete list of hundreds of examples across the years, please see:
-http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=/tmp
+https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=/tmp
When set to "0", symlink following behavior is unrestricted.
--
2.27.0
^ permalink raw reply related [flat|nested] 8+ messages in thread
end of thread, other threads:[~2020-06-26 19:18 UTC | newest]
Thread overview: 8+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-06-22 18:19 [PATCH] Replace HTTP links with HTTPS ones: Documentation/admin-guide Alexander A. Klimov
2020-06-22 18:38 ` Jonathan Neuschäfer
-- strict thread matches above, loose matches on Subject: below --
2020-06-21 13:20 Alexander A. Klimov
2020-06-21 22:04 ` Pavel Machek
2020-06-22 13:14 ` Jonathan Corbet
2020-06-22 18:17 ` Alexander A. Klimov
2020-06-26 17:02 ` Jonathan Corbet
2020-06-26 19:18 ` Alexander A. Klimov
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).