Grrr... modprobe.conf

Michał Piotrowski mkkp4x4 at gmail.com
Mon Sep 20 12:54:43 UTC 2010


2010/9/20 Bryn M. Reeves <bmr at redhat.com>:
> On 09/20/2010 01:37 PM, Tom Horsley wrote:
>> On Mon, 20 Sep 2010 11:56:56 +0200
>> Michał Piotrowski wrote:
>>
>>> You can blacklist the firewall modules - it can be critical :)
>>
>> Actually, I think you can run any arbitrary command to
>> load a module,

Or pass any parameter to a module.

> so it is probably a gigantic security
>> hole.

Yeah - but it depends on conditions, system configuration etc. It can
be treated as "minor issue", "major issue", "high risk vulnerability"
or "gigantic security hole" - depends on system configuration and
other things. Let's CC devel list.

>
> Kinda what I was thinking. This should be fairly easy to track down with
> the amount of tracing and debugging tools we have in the distro now. I'm
> not convinced it's dracut's

My F13 devel system is not affected - it's a standard web developer
system with databases, web servers, script languages etc. I don't
think that dracut is the culprit.

> doing but if I have time to get a VM
> installed later on I'll try to have a poke around.
>
> Cheers,
> Bryn.

Regards,
Michal


More information about the devel mailing list