linux-kernel - Re: [PATCH] reboot: disable usermodehelper to prevent fs access

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 05 May 2011 17:24:25 -0400
From:	Valdis.Kletnieks@...edu
To:	Kay Sievers <kay.sievers@...y.org>
Cc:	Greg KH <greg@...ah.com>,
	linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH] reboot: disable usermodehelper to prevent fs access

On Thu, 05 May 2011 13:32:05 +0200, Kay Sievers said:

> In case CONFIG_UEVENT_HELPER_PATH is not set to "", which it
> should be on every system

If it indeed should be that on every system, shouldn't it be listed
in feature-removal-schedule.txt?

Does anybody have a running list of "Stuff we set by default at one time, but
no longer recommend"?  I discovered that on my laptop, I have this sucker set
to /sbin/hotplug still (which explains why I get "filesystem busy" issues at
shutdown.  Just like the TCP_BIC issue yesterday, it's something that got set
aeons ago and 'make oldconfig' has been propagating.

But to clean things up, I'd have to know what stuff needed cleaning....

Content of type "application/pgp-signature" skipped