From owner-svn-src-head@freebsd.org  Sat Dec 10 10:12:06 2016
Return-Path: <owner-svn-src-head@freebsd.org>
Delivered-To: svn-src-head@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 77251C70533;
 Sat, 10 Dec 2016 10:12:06 +0000 (UTC)
 (envelope-from kostik@kib.kiev.ua)
Received: from kib.kiev.ua (kib.kiev.ua [IPv6:2001:470:d5e7:1::1])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id E5EEA8D1;
 Sat, 10 Dec 2016 10:12:05 +0000 (UTC)
 (envelope-from kostik@kib.kiev.ua)
Received: from tom.home (kib@localhost [127.0.0.1])
 by kib.kiev.ua (8.15.2/8.15.2) with ESMTPS id uBAABseQ004130
 (version=TLSv1 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO);
 Sat, 10 Dec 2016 12:11:54 +0200 (EET) (envelope-from kostik@tom.home)
DKIM-Filter: OpenDKIM Filter v2.10.3 kib.kiev.ua uBAABseQ004130
Received: (from kostik@localhost)
 by tom.home (8.15.2/8.15.2/Submit) id uBAABsJ3004129;
 Sat, 10 Dec 2016 12:11:54 +0200 (EET) (envelope-from kostik)
From: Konstantin Belousov <kostik@kib.kiev.ua>
Date: Sat, 10 Dec 2016 12:11:54 +0200
To: Conrad Meyer <cem@freebsd.org>
Cc: src-committers <src-committers@freebsd.org>, svn-src-all@freebsd.org,
 svn-src-head@freebsd.org, emaste@freebsd.org
Subject: Re: svn commit: r308212 - in head/sys: fs/nfsserver kern sys
Message-ID: <20161210101154.GM54029@kib.kiev.ua>
References: <201611021243.uA2ChGIg003295@repo.freebsd.org>
 <CAG6CVpWuEMtVzyusaSpmrKazvkthN7Hi8mO7==zubhDSN=WxWg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAG6CVpWuEMtVzyusaSpmrKazvkthN7Hi8mO7==zubhDSN=WxWg@mail.gmail.com>
jrom: Konstantin Belousov <kostikbel@gmail.com>
User-Agent: Mutt/1.7.1 (2016-10-04)
X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00
 autolearn=ham autolearn_force=no version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on tom.home
X-BeenThere: svn-src-head@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: SVN commit messages for the src tree for head/-current
 <svn-src-head.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/svn-src-head>,
 <mailto:svn-src-head-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-src-head/>
List-Post: <mailto:svn-src-head@freebsd.org>
List-Help: <mailto:svn-src-head-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/svn-src-head>,
 <mailto:svn-src-head-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 10 Dec 2016 10:12:06 -0000

On Fri, Dec 09, 2016 at 12:13:09PM -0800, Conrad Meyer wrote:
> On Wed, Nov 2, 2016 at 5:43 AM, Konstantin Belousov <kib@freebsd.org> wrote:
> > Author: kib
> > Date: Wed Nov  2 12:43:15 2016
> > New Revision: 308212
> > URL: https://svnweb.freebsd.org/changeset/base/308212
> >
> > Log:
> >   Allow some dotdot lookups in capability mode.
> >
> >   If dotdot lookup does not escape from the file descriptor passed as
> >   the lookup root, we can allow the component traversal.  Track the
> >   directories traversed, and check the result of dotdot lookup against
> >   the recorded list of the directory vnodes.
> >
> >   Dotdot lookups are enabled by sysctl vfs.lookup_cap_dotdot, currently
> >   disabled by default until more verification of the approach is done.
> 
> Hi Konstantin,
> 
> Are we waiting on a specific reviewer or something else?  It would be
> very nice to have this enabled by default.
I did waited for some review, but it obviously not going to happen.
Please push the button for D8746, and I will commit the change.