linux.git/drivers/mtd, branch v3.9-rc2

fs: Limit sys_mount to only request filesystem modules.

2013-03-04T03:36:31+00:00

Modify the request_module to prefix the file system type with "fs-"
and add aliases to all of the filesystems that can be built as modules
to match.

A common practice is to build all of the kernel code and leave code
that is not commonly needed as modules, with the result that many
users are exposed to any bug anywhere in the kernel.

Looking for filesystems with a fs- prefix limits the pool of possible
modules that can be loaded by mount to just filesystems trivially
making things safer with no real cost.

Using aliases means user space can control the policy of which
filesystem modules are auto-loaded by editing /etc/modprobe.d/*.conf
with blacklist and alias directives.  Allowing simple, safe,
well understood work-arounds to known problematic software.

This also addresses a rare but unfortunate problem where the filesystem
name is not the same as it's module name and module auto-loading
would not work.  While writing this patch I saw a handful of such
cases.  The most significant being autofs that lives in the module
autofs4.

This is relevant to user namespaces because we can reach the request
module in get_fs_type() without having any special permissions, and
people get uncomfortable when a user specified string (in this case
the filesystem type) goes all of the way to request_module.

After having looked at this issue I don't think there is any
particular reason to perform any filtering or permission checks beyond
making it clear in the module request that we want a filesystem
module.  The common pattern in the kernel is to call request_module()
without regards to the users permissions.  In general all a filesystem
module does once loaded is call register_filesystem() and go to sleep.
Which means there is not much attack surface exposed by loading a
filesytem module unless the filesystem is mounted.  In a user
namespace filesystems are not mounted unless .fs_flags = FS_USERNS_MOUNT,
which most filesystems do not set today.

Acked-by: Serge Hallyn 
Acked-by: Kees Cook 
Reported-by: Kees Cook 
Signed-off-by: "Eric W. Biederman"

Merge tag 'for-linus-20130301' of git://git.infradead.org/linux-mtd

2013-03-03T00:33:54+00:00

Pull MTD update from David Woodhouse:
 "Fairly unexciting MTD merge for 3.9:

   - misc clean-ups in the MTD command-line partitioning parser
     (cmdlinepart)
   - add flash locking support for STmicro chips serial flash chips, as
     well as for CFI command set 2 chips.
   - new driver for the ELM error correction HW module found in various
     TI chips, enable the OMAP NAND driver to use the ELM HW error
     correction
   - added number of new serial flash IDs
   - various fixes and improvements in the gpmi NAND driver
   - bcm47xx NAND driver improvements
   - make the mtdpart module actually removable"

* tag 'for-linus-20130301' of git://git.infradead.org/linux-mtd: (45 commits)
  mtd: map: BUG() in non handled cases
  mtd: bcm47xxnflash: use pr_fmt for module prefix in messages
  mtd: davinci_nand: Use managed resources
  mtd: mtd_torturetest can cause stack overflows
  mtd: physmap_of: Convert device allocation to managed devm_kzalloc()
  mtd: at91: atmel_nand: for PMECC, add code to check the ONFI parameter ECC requirement.
  mtd: atmel_nand: make pmecc-cap, pmecc-sector-size in dts is optional.
  mtd: atmel_nand: avoid to report an error when lookup table offset is 0.
  mtd: bcm47xxsflash: adjust names of bus-specific functions
  mtd: bcm47xxpart: improve probing of nvram partition
  mtd: bcm47xxpart: add support for other erase sizes
  mtd: bcm47xxnflash: register this as normal driver
  mtd: bcm47xxnflash: fix message
  mtd: bcm47xxsflash: register this as normal driver
  mtd: bcm47xxsflash: write number of written bytes
  mtd: gpmi: add sanity check for the ECC
  mtd: gpmi: set the Golois Field bit for mx6q's BCH
  mtd: devices: elm: Removes  literals in elm DT node
  mtd: gpmi: fix a dereferencing freed memory error
  mtd: fix the wrong timeo for panic_nand_wait()
  ...

Merge branch 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus

2013-03-02T15:44:16+00:00

Pull MIPS updates from Ralf Baechle:

 o Add basic support for the Mediatek/Ralink Wireless SoC family.

 o The Qualcomm Atheros platform is extended by support for the new
   QCA955X SoC series as well as a bunch of patches that get the code
   ready for OF support.

 o Lantiq and BCM47XX platform have a few improvements and bug fixes.

 o MIPS has sent a few patches that get the kernel ready for the
   upcoming microMIPS support.

 o The rest of the series is made up of small bug fixes and cleanups
   that relate to various parts of the MIPS code.  The biggy in there is
   a whitespace cleanup.  After I was sent another set of whitespace
   cleanup patches I decided it was the time to clean the whitespace
   "issues" for once and and that touches many files below arch/mips/.

Fix up silly conflicts, mostly due to whitespace cleanups.

* 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus: (105 commits)
  MIPS: Quit exporting kernel internel break codes to uapi/asm/break.h
  MIPS: remove broken conditional inside vpe loader code
  MIPS: SMTC: fix implicit declaration of set_vi_handler
  MIPS: early_printk: drop __init annotations
  MIPS: Probe for and report hardware virtualization support.
  MIPS: ath79: add support for the Qualcomm Atheros AP136-010 board
  MIPS: ath79: add USB controller registration code for the QCA955X SoCs
  MIPS: ath79: add PCI controller registration code for the QCA955X SoCs
  MIPS: ath79: add WMAC registration code for the QCA955X SoCs
  MIPS: ath79: register UART for the QCA955X SoCs
  MIPS: ath79: add QCA955X specific glue to ath79_device_reset_{set, clear}
  MIPS: ath79: add GPIO setup code for the QCA955X SoCs
  MIPS: ath79: add IRQ handling code for the QCA955X SoCs
  MIPS: ath79: add clock setup code for the QCA955X SoCs
  MIPS: ath79: add SoC detection code for the QCA955X SoCs
  MIPS: ath79: add early printk support for the QCA955X SoCs
  MIPS: ath79: fix WMAC IRQ resource assignment
  mips: reserve elfcorehdr
  mips: Make sure kernel memory is in iomem
  MIPS: ath79: use dynamically allocated USB platform devices
  ...

mtd: mtd_stresstest: use prandom_bytes()

2013-02-28T03:10:23+00:00

Signed-off-by: Akinobu Mita 
Cc: Artem Bityutskiy 
Cc: David Woodhouse 
Cc: "Theodore Ts'o" 
Cc: Adrian Hunter 
Cc: David Laight 
Cc: Eilon Greenstein 
Cc: Michel Lespinasse 
Cc: Robert Love 
Cc: Valdis Kletnieks 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

mtd: mtd_subpagetest: convert to use prandom library

2013-02-28T03:10:23+00:00

This removes home-brewed pseudo-random number generator and use
prandom library.

Signed-off-by: Akinobu Mita 
Cc: Artem Bityutskiy 
Cc: David Woodhouse 
Cc: "Theodore Ts'o" 
Cc: Adrian Hunter 
Cc: David Laight 
Cc: Eilon Greenstein 
Cc: Michel Lespinasse 
Cc: Robert Love 
Cc: Valdis Kletnieks 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

mtd: mtd_speedtest: use prandom_bytes

2013-02-28T03:10:22+00:00

Use prandom_bytes instead of equivalent local function.

Signed-off-by: Akinobu Mita 
Cc: Artem Bityutskiy 
Cc: David Woodhouse 
Cc: "Theodore Ts'o" 
Cc: Adrian Hunter 
Cc: David Laight 
Cc: Eilon Greenstein 
Cc: Michel Lespinasse 
Cc: Robert Love 
Cc: Valdis Kletnieks 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

mtd: mtd_pagetest: convert to use prandom library

2013-02-28T03:10:22+00:00

This removes home-brewed pseudo-random number generator and use
prandom library.

Signed-off-by: Akinobu Mita 
Cc: Artem Bityutskiy 
Cc: David Woodhouse 
Cc: "Theodore Ts'o" 
Cc: Adrian Hunter 
Cc: David Laight 
Cc: Eilon Greenstein 
Cc: Michel Lespinasse 
Cc: Robert Love 
Cc: Valdis Kletnieks 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

mtd: mtd_oobtest: convert to use prandom library

2013-02-28T03:10:22+00:00

This removes home-brewed pseudo-random number generator and use
prandom library.

Signed-off-by: Akinobu Mita 
Cc: Artem Bityutskiy 
Cc: David Woodhouse 
Cc: "Theodore Ts'o" 
Cc: Adrian Hunter 
Cc: David Laight 
Cc: Eilon Greenstein 
Cc: Michel Lespinasse 
Cc: Robert Love 
Cc: Valdis Kletnieks 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

mtd: mtd_nandecctest: use prandom_bytes instead of get_random_bytes()

2013-02-28T03:10:22+00:00

Using prandom_bytes() is enough.  Because this data is only used
for testing, not used for cryptographic use.

Signed-off-by: Akinobu Mita 
Cc: Artem Bityutskiy 
Cc: David Woodhouse 
Cc: "Theodore Ts'o" 
Cc: Adrian Hunter 
Cc: David Laight 
Cc: Eilon Greenstein 
Cc: Michel Lespinasse 
Cc: Robert Love 
Cc: Valdis Kletnieks 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

mtd: convert to idr_alloc()

2013-02-28T03:10:18+00:00

Convert to the much saner new idr interface.

Signed-off-by: Tejun Heo 
Tested-by: Ezequiel Garcia 
Cc: David Woodhouse 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds