Grrr... modprobe.conf

Adam Williamson awilliam at redhat.com
Tue Sep 21 15:47:19 UTC 2010


On Tue, 2010-09-21 at 15:33 +0100, David Woodhouse wrote:

> Why on earth would that be critical? The firewall is just a band-aid. If
> it does anything useful, your system was broken (or infected) already.
> 
> Seriously, if there is *any* case where the lack of firewall would be
> 'critical', please file a bug for that.
> 
> There are *much* more interesting things that someone could do with
> arbitrary write access to /etc/modprobe.conf

In that case, please stop bikeshedding. Your post doesn't add anything
significant to the discussion, since we all agree that a world-writeable
modprobe.conf is an obvious security problem. Arguing about the
implementation details of an attack against modprobe.conf isn't really a
lot of use.
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Fedora Talk: adamwill AT fedoraproject DOT org
http://www.happyassassin.net



More information about the test mailing list