linux-kernel - Re: [PATCH] module,bug: Add TAINT_OOT_MODULE flag for modules not built in-tree

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1319536366.11727.0.camel@deadeye>
Date:	Tue, 25 Oct 2011 11:52:46 +0200
From:	Ben Hutchings <ben@...adent.org.uk>
To:	Rusty Russell <rusty@...tcorp.com.au>
Cc:	Randy Dunlap <rdunlap@...otime.net>,
	LKML <linux-kernel@...r.kernel.org>,
	Dave Jones <davej@...hat.com>, Greg KH <greg@...ah.com>,
	Debian kernel maintainers <debian-kernel@...ts.debian.org>
Subject: Re: [PATCH] module,bug: Add TAINT_OOT_MODULE flag for modules not
 built in-tree

On Tue, 2011-10-25 at 14:26 +1030, Rusty Russell wrote:
> On Mon, 24 Oct 2011 07:57:03 -0700, Randy Dunlap <rdunlap@...otime.net> wrote:
> > On 10/24/11 06:12, Ben Hutchings wrote:
> > > Use of the GPL or a compatible licence doesn't necessarily make the code
> > > any good.  We already consider staging modules to be suspect, and this
> > > should also be true for out-of-tree modules which may receive very
> > > little review.
> > > 
> > > Signed-off-by: Ben Hutchings <ben@...adent.org.uk>
> > > ---
> > > Debian has been carrying this for the last few kernel versions.  The
> > > recent thread '[RFC] virtualbox tainting.' and discussions at KS suggest
> > > that this might be more generally useful.
> > > 
> > > Ben.
> > > 
> > >  include/linux/kernel.h |    1 +
> > >  kernel/module.c        |    5 +++++
> > >  kernel/panic.c         |    2 ++
> > >  scripts/mod/modpost.c  |    7 +++++++
> > >  4 files changed, 15 insertions(+), 0 deletions(-)
> > 
> > Hi,
> > 
> > Please add 'O' to Documentation/oops-tracing.txt.

Sorry, this is the second time I've missed that now...

> I did that, and applied the patch.  See below.
[...]

Thanks to everyone.

Ben.

-- 
Ben Hutchings
DNRC Motto:  I can please only one person per day.
Today is not your day.  Tomorrow isn't looking good either.

Download attachment "signature.asc" of type "application/pgp-signature" (829 bytes)