Commit 7a6498eb authored by Alexander A. Klimov's avatar Alexander A. Klimov Committed by David S. Miller
Browse files

Replace HTTP links with HTTPS ones: IPv* 

Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.

Deterministic algorithm:
For each file:
  If not .svg:
    For each line:
      If doesn't contain `\bxmlns\b`:
        For each link, `\bhttp://[^#

 \t\r\n]*(?:\w|/)`:
          If both the HTTP and HTTPS versions
          return 200 OK and serve the same content:
            Replace HTTP with HTTPS.

Signed-off-by: default avatarAlexander A. Klimov <grandmaster@al2klimov.de>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 1eafa736

net/ipv4/Kconfig

+4 −4
Original line number Original line Diff line number Diff line
@@ -10,7 +10,7 @@ config IP_MULTICAST 
	  intend to participate in the MBONE, a high bandwidth network on top

	  intend to participate in the MBONE, a high bandwidth network on top

	  of the Internet which carries audio and video broadcasts. More

	  of the Internet which carries audio and video broadcasts. More

	  information about the MBONE is on the WWW at

	  information about the MBONE is on the WWW at

	  <http://www.savetz.com/mbone/>. For most people, it's safe to say N.

	  <https://www.savetz.com/mbone/>. For most people, it's safe to say N.





config IP_ADVANCED_ROUTER

config IP_ADVANCED_ROUTER

	bool "IP: advanced router"

	bool "IP: advanced router"
@@ -73,7 +73,7 @@ config IP_MULTIPLE_TABLES 




	  If you need more information, see the Linux Advanced

	  If you need more information, see the Linux Advanced

	  Routing and Traffic Control documentation at

	  Routing and Traffic Control documentation at

	  <http://lartc.org/howto/lartc.rpdb.html>

	  <https://lartc.org/howto/lartc.rpdb.html>





	  If unsure, say N.

	  If unsure, say N.
@@ -280,7 +280,7 @@ config SYN_COOKIES 
	  continue to connect, even when your machine is under attack. There

	  continue to connect, even when your machine is under attack. There

	  is no need for the legitimate users to change their TCP/IP software;

	  is no need for the legitimate users to change their TCP/IP software;

	  SYN cookies work transparently to them. For technical information

	  SYN cookies work transparently to them. For technical information

	  about SYN cookies, check out <http://cr.yp.to/syncookies.html>.

	  about SYN cookies, check out <https://cr.yp.to/syncookies.html>.





	  If you are SYN flooded, the source address reported by the kernel is

	  If you are SYN flooded, the source address reported by the kernel is

	  likely to have been forged by the attacker; it is only reported as

	  likely to have been forged by the attacker; it is only reported as
@@ -525,7 +525,7 @@ config TCP_CONG_HSTCP 
	  A modification to TCP's congestion control mechanism for use

	  A modification to TCP's congestion control mechanism for use

	  with large congestion windows. A table indicates how much to

	  with large congestion windows. A table indicates how much to

	  increase the congestion window by when an ACK is received.

	  increase the congestion window by when an ACK is received.

	  For more detail see http://www.icir.org/floyd/hstcp.html

	  For more detail see https://www.icir.org/floyd/hstcp.html





config TCP_CONG_HYBLA

config TCP_CONG_HYBLA

	tristate "TCP-Hybla congestion control algorithm"

	tristate "TCP-Hybla congestion control algorithm"

net/ipv4/cipso_ipv4.c

+2 −2
Original line number Original line Diff line number Diff line
@@ -10,9 +10,9 @@ 
 *

 *

 * The CIPSO draft specification can be found in the kernel's Documentation

 * The CIPSO draft specification can be found in the kernel's Documentation

 * directory as well as the following URL:

 * directory as well as the following URL:

 *   http://tools.ietf.org/id/draft-ietf-cipso-ipsecurity-01.txt

 *   https://tools.ietf.org/id/draft-ietf-cipso-ipsecurity-01.txt

 * The FIPS-188 specification can be found at the following URL:

 * The FIPS-188 specification can be found at the following URL:

 *   http://www.itl.nist.gov/fipspubs/fip188.htm

 *   https://www.itl.nist.gov/fipspubs/fip188.htm

 *

 *

 * Author: Paul Moore <paul.moore@hp.com>

 * Author: Paul Moore <paul.moore@hp.com>

 */

 */

net/ipv4/fib_trie.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -13,7 +13,7 @@ 
 *

 *

 * An experimental study of compression methods for dynamic tries

 * An experimental study of compression methods for dynamic tries

 * Stefan Nilsson and Matti Tikkanen. Algorithmica, 33(1):19-33, 2002.

 * Stefan Nilsson and Matti Tikkanen. Algorithmica, 33(1):19-33, 2002.

 * http://www.csc.kth.se/~snilsson/software/dyntrie2/

 * https://www.csc.kth.se/~snilsson/software/dyntrie2/

 *

 *

 * IP-address lookup using LC-tries. Stefan Nilsson and Gunnar Karlsson

 * IP-address lookup using LC-tries. Stefan Nilsson and Gunnar Karlsson

 * IEEE Journal on Selected Areas in Communications, 17(6):1083-1092, June 1999

 * IEEE Journal on Selected Areas in Communications, 17(6):1083-1092, June 1999

net/ipv4/netfilter/ipt_CLUSTERIP.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -3,7 +3,7 @@ 
 * (C) 2003-2004 by Harald Welte <laforge@netfilter.org>

 * (C) 2003-2004 by Harald Welte <laforge@netfilter.org>

 * based on ideas of Fabio Olive Leite <olive@unixforge.org>

 * based on ideas of Fabio Olive Leite <olive@unixforge.org>

 *

 *

 * Development of this code funded by SuSE Linux AG, http://www.suse.com/

 * Development of this code funded by SuSE Linux AG, https://www.suse.com/

 */

 */

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

#include <linux/module.h>

#include <linux/module.h>

net/ipv4/tcp_highspeed.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -2,7 +2,7 @@ 
/*

/*

 * Sally Floyd's High Speed TCP (RFC 3649) congestion control

 * Sally Floyd's High Speed TCP (RFC 3649) congestion control

 *

 *

 * See http://www.icir.org/floyd/hstcp.html

 * See https://www.icir.org/floyd/hstcp.html

 *

 *

 * John Heffner <jheffner@psc.edu>

 * John Heffner <jheffner@psc.edu>

 */

 */