Steve French 0603c96f3a SMB: Validate negotiate (to protect against downgrade) even if signing off ... As long as signing is supported (ie not a guest user connection) and connection is SMB3 or SMB3.02, then validate negotiate (protect against man in the middle downgrade attacks). We had been doing this only when signing was required, not when signing was just enabled, but this more closely matches recommended SMB3 behavior and is better security. Suggested by Metze. Signed-off-by: Steve French <smfrench@gmail.com> Reviewed-by: Jeremy Allison <jra@samba.org> Acked-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ronnie Sahlberg <lsahlber@redhat.com> CC: Stable <stable@vger.kernel.org>		2017-09-20 19:57:18 -05:00
..
asn1.c
cache.c	fscache: remove unused ->now_uncached callback	2017-09-06 17:27:26 -07:00
cifs_debug.c	[SMB3] Update session and share information displayed for debugging SMB2/SMB3	2017-09-20 16:46:49 -05:00
cifs_debug.h
cifs_dfs_ref.c
cifs_fs_sb.h
cifs_ioctl.h
cifs_spnego.c
cifs_spnego.h
cifs_unicode.c	[SMB3] Remove ifdef since SMB3 (and later) now STRONGLY preferred	2017-07-08 18:57:07 -05:00
cifs_unicode.h	[SMB3] Remove ifdef since SMB3 (and later) now STRONGLY preferred	2017-07-08 18:57:07 -05:00
cifs_uniupr.h
cifsacl.c	cifs: cifsacl: Use a temporary ops variable to reduce code length	2017-05-12 19:45:18 -05:00
cifsacl.h
cifsencrypt.c	fs: cifs: replace CURRENT_TIME by other appropriate apis	2017-05-08 17:15:15 -07:00
cifsfs.c	cifs: release cifs root_cred after exit_cifs	2017-09-20 18:46:16 -05:00
cifsfs.h	Update version of cifs module	2017-09-17 23:10:48 -05:00
cifsglob.h	SMB3: Add support for multidialect negotiate (SMB2.1 and later)	2017-09-17 23:10:48 -05:00
cifspdu.h
cifsproto.h	cifs: Add support for writing attributes on SMB2+	2017-09-04 14:03:45 -05:00
cifssmb.c	enable xattr support for smb3 and also a bugfix	2017-09-07 16:06:14 -07:00
connect.c	cifs: release auth_key.response for reconnect.	2017-09-20 18:46:23 -05:00
dir.c	CIFS: remove endian related sparse warning	2017-08-30 14:43:11 -05:00
dns_resolve.c
dns_resolve.h
export.c
file.c	CIFS: make arrays static const, reduces object code size	2017-09-20 18:46:10 -05:00
fscache.c
fscache.h
inode.c	sched/wait: Split out the wait_bit*() APIs from <linux/wait.h> into <linux/wait_bit.h>	2017-06-20 12:19:09 +02:00
ioctl.c	[SMB3] Remove ifdef since SMB3 (and later) now STRONGLY preferred	2017-07-08 18:57:07 -05:00
Kconfig	[SMB3] Remove ifdef since SMB3 (and later) now STRONGLY preferred	2017-07-08 18:57:07 -05:00
link.c	[SMB3] Remove ifdef since SMB3 (and later) now STRONGLY preferred	2017-07-08 18:57:07 -05:00
Makefile	[SMB3] Remove ifdef since SMB3 (and later) now STRONGLY preferred	2017-07-08 18:57:07 -05:00
misc.c	[SMB3] Remove ifdef since SMB3 (and later) now STRONGLY preferred	2017-07-08 18:57:07 -05:00
netmisc.c	cifs: small underflow in cnvrtDosUnixTm()	2017-05-02 14:57:34 -05:00
nterr.c
nterr.h
ntlmssp.h
readdir.c
rfc1002pdu.h
sess.c
smb1ops.c	CIFS: Improve readdir verbosity	2017-06-20 19:13:47 -05:00
smb2file.c
smb2glob.h
smb2inode.c
smb2maperror.c	CIFS: Display SMB2 error codes in the hex format	2017-07-08 17:23:10 -05:00
smb2misc.c	CIFS: fix oplock break deadlocks	2017-05-03 10:10:10 -05:00
smb2ops.c	cifs: hide unused functions	2017-09-17 23:10:48 -05:00
smb2pdu.c	SMB: Validate negotiate (to protect against downgrade) even if signing off	2017-09-20 19:57:18 -05:00
smb2pdu.h	SMB3: Add support for multidialect negotiate (SMB2.1 and later)	2017-09-17 23:10:48 -05:00
smb2proto.h	cifs: Add support for writing attributes on SMB2+	2017-09-04 14:03:45 -05:00
smb2status.h
smb2transport.c	CIFS: add CONFIG_CIFS_DEBUG_KEYS to dump encryption keys	2017-07-05 19:51:04 -05:00
smbencrypt.c
smberr.h
smbfsctl.h
transport.c	cifs: Do not modify mid entry after submitting I/O in cifs_call_async	2017-07-05 19:58:08 -05:00
winucase.c
xattr.c	cifs: Add support for writing attributes on SMB2+	2017-09-04 14:03:45 -05:00