PR28240 patch: debuginfod-client negative-hit caching for root user

2021-08-18 Thread Frank Ch. Eigler via Elfutils-devel
Hi - Important patch. commit d2cbc610a9e6552f663e29136d19597b8fdcf832 (HEAD -> master) Author: Frank Ch. Eigler Date: Wed Aug 18 18:29:34 2021 -0400 PR28240: debuginfod client root-safe negative caching Negative cache (000-permission) files were incorrectly treated as valid

Re: [PATCH] debuginfod: PR27917 - protect against federation loops

2021-08-18 Thread Frank Ch. Eigler via Elfutils-devel
Hi - > This patch aims to reduce the risk by adding an option to debuginfod > that functions kind of like an IP packet's TTL: a limit on the > length of XFF: header that debuginfod is willing to process. If > X-Forwarded-For: exceeds N hops, it will not delegate a local lookup > miss to upstream d