Rawhide kernel image no longer readable

Kyle McMartin kyle at mcmartin.ca
Sat Nov 20 21:15:51 UTC 2010


On Fri, Nov 19, 2010 at 11:14:39PM +0000, Richard W.M. Jones wrote:
> Kyle,
> 
> From latest Rawhide kernel.rpm:
> 
> * Wed Nov 17 2010 Kyle McMartin <kyle at redhat.com>
> - Make vmlinuz/System.map root read-write only by default. You can
>   just chmod 644 them later if you (unlikely) need them without root.
> 
> This completely breaks libguestfs.  We need to be able to read the
> kernel image in order to boot it in qemu as a non-root user.
> 
> What's the motivation for this change?
> 

Preventing rootkits from being able to trivially find addresses.


More information about the devel mailing list