svn commit: r308212 - in head/sys: fs/nfsserver kern sys

[Konstantin Belousov]

On Fri, Dec 09, 2016 at 12:13:09PM -0800, Conrad Meyer wrote:
> On Wed, Nov 2, 2016 at 5:43 AM, Konstantin Belousov <kib at freebsd.org> wrote:
> > Author: kib
> > Date: Wed Nov  2 12:43:15 2016
> > New Revision: 308212
> > URL: https://svnweb.freebsd.org/changeset/base/308212
> >
> > Log:
> >   Allow some dotdot lookups in capability mode.
> >
> >   If dotdot lookup does not escape from the file descriptor passed as
> >   the lookup root, we can allow the component traversal.  Track the
> >   directories traversed, and check the result of dotdot lookup against
> >   the recorded list of the directory vnodes.
> >
> >   Dotdot lookups are enabled by sysctl vfs.lookup_cap_dotdot, currently
> >   disabled by default until more verification of the approach is done.
> 
> Hi Konstantin,
> 
> Are we waiting on a specific reviewer or something else?  It would be
> very nice to have this enabled by default.
I did waited for some review, but it obviously not going to happen.
Please push the button for D8746, and I will commit the change.