Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1626865

Re: [PATCH v3 1/2] modules:capabilities: automatic module loading restriction

Show all headers | View raw

On Wed, Apr 19, 2017 at 3:20 PM, Djalal Harouni <tixxdz@gmail.com> wrote:
> Currently, an explicit call to load or unload kernel modules require
> CAP_SYS_MODULE capability. However unprivileged users have always been
> able to load some modules using the implicit auto-load operation. An
> automatic module loading happens when programs request a kernel feature
> from a module that is not loaded. In order to satisfy userspace, the
> kernel then automatically load all these required modules.

I like this feature.

--Andy

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH v3 1/2] modules:capabilities: automatic module loading restriction Djalal Harouni <tixxdz@gmail.com> - 2017-04-20 00:30 +0200
  Re: [PATCH v3 1/2] modules:capabilities: automatic module loading restriction Andy Lutomirski <luto@kernel.org> - 2017-04-20 01:20 +0200
  Re: [PATCH v3 1/2] modules:capabilities: automatic module loading  restriction Ben Hutchings <ben@decadent.org.uk> - 2017-04-20 04:30 +0200
    Re: [kernel-hardening] Re: [PATCH v3 1/2] modules:capabilities:  automatic module loading restriction Djalal Harouni <tixxdz@gmail.com> - 2017-04-20 14:50 +0200
      Re: [kernel-hardening] Re: [PATCH v3 1/2] modules:capabilities:  automatic module loading restriction Ben Hutchings <ben@decadent.org.uk> - 2017-04-20 17:10 +0200
        Re: [kernel-hardening] Re: [PATCH v3 1/2] modules:capabilities:  automatic module loading restriction Djalal Harouni <tixxdz@gmail.com> - 2017-04-20 22:40 +0200
          Re: [kernel-hardening] Re: [PATCH v3 1/2] modules:capabilities:  automatic module loading restriction Kees Cook <keescook@chromium.org> - 2017-04-20 23:40 +0200

csiph-web