Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #63926

Dropping the ntfs kernel module

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Linux's ntfs kernel module, supporting Windows's native filesystem, has
three security issues open against it (CVE-2018-12929, CVE-2018-12930,
CVE-2018-12931) and there is no sign of progress towards fixing them
upstream.

This module is limited to read-only functionality by default; its write
support only covers overwriting existing files and has been disabled in
Debian kernel configurations since stretch.  The alternative FUSE-based 
implementation, ntfs-3g, is far more functional, though it may have
lower performance.  It is already used in the installer and included in
all the desktop tasks (unless installation of Recommends is disabled).

I intend to disable building this module in the next upload to sid,
targetting buster.

I think we should also disable building it in updates to jessie and
stretch, but would like to get an OK from the Stable Release Managers
before doing that.

Ben.

-- 
Ben Hutchings
Horngren's Observation:
              Among economists, the real world is often a special case.

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Dropping the ntfs kernel module Ben Hutchings <ben@decadent.org.uk> - 2019-04-25 16:30 +0200
  Re: Dropping the ntfs kernel module Salvatore Bonaccorso <carnil@debian.org> - 2019-06-08 14:10 +0200
    Re: Dropping the ntfs kernel module "Enrico Weigelt, metux IT consult" <lkml@metux.net> - 2019-06-11 11:40 +0200
      Re: Dropping the ntfs kernel module Ben Hutchings <ben@decadent.org.uk> - 2019-06-11 22:40 +0200

csiph-web