Merge tag 'ksmbd-for-7.4-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb

Pull smb server fixes from Namjae Jeon:

 - Evaluate explicit-access requests in DACL order with exact SID
   matching, and prevent guest and anonymous sessions from matching
   Authenticated Users

 - Apply Unix group and OWNER RIGHTS ACEs, and keep their denials when
   POSIX ACL fallback determines access

 - Allow the parent directory’s DACL to grant explicitly requested
   DELETE and FILE_READ_ATTRIBUTES through FILE_DELETE_CHILD and
   FILE_LIST_DIRECTORY

 - Exclude metadata-only file and stream opens from sharing conflicts
   and stream delete-sharing checks, while accounting for writes implied
   by overwrites and named-stream creation

 - Return STATUS_ACCESS_DENIED for reads on files lacking FMODE_READ,
   preventing warnings in __kernel_read() and potential panics

 - Pin parent dentries during SMB2 CREATE permission, status, and ACL
   inheritance operations to prevent use-after-free races with
   concurrent rename and removal

 - Keep expired sessions bound to their original user during NTLM
   reauthentication, preventing identity changes and a user-object leak

* tag 'ksmbd-for-7.4-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb:
  ksmbd: keep group denials when a POSIX ACL entry decides access
  ksmbd: refuse reauthentication of an expired session as another user
  ksmbd: pin parent dentries in SMB2 CREATE ACL path
  ksmbd: let the parent's DACL grant DELETE and FILE_READ_ATTRIBUTES
  ksmbd: evaluate the DACL in order for explicit access requests
  ksmbd: skip metadata-only stream opens in the delete check
  ksmbd: skip metadata-only opens in sharing checks
  ksmbd: refuse to read a handle that is not open for reading
  ksmbd: grant a caller what its groups and OWNER RIGHTS ACEs allow

0 files changed, 0 insertions, 0 deletions