Reply to post: Re: This does not belong in the Kernel

Back to work, Linux admins: You may have a CVSS 10 kernel bug to address

Jeremy Allison

Re: This does not belong in the Kernel

It's.. complicated. Right now there's no integration between ksmbd and Samba, although we collaborate on SMB3+POSIX extension development.

Samba is a large and old project, with many procedures in place to try and prevent accidents like this (although we're both written in C, so until we can port to a safer language - which will probably never happen - there will *always* be disasters like this).

Having said that IMHO the kernel cifsfs and ksmbd code have some quality issues which come down to insufficient code review practices. I have complained long and bitterly about this in the past and the people involved are well aware of my opinions.

Take a look at Samba's gitlab page:

https://gitlab.com/samba-team/samba/-/merge_requests

Every potential commit has to go through a full pipeline continuous integration build (look here for examples):

https://gitlab.com/samba-team/samba/-/pipelines

and all commits must have 2+ Samba Team engineer review and sign-off before merging into the upstream codebase. Currently I don't see something similar for cifsfs and ksmbd. I'd be a lot happier if they had something like this.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon