econet: Move to staging
Subsystems (3)
PATCH 2/3 econet: Move to staging
Recent review has revealed several bugs in obscure protocol implementations that can be exploited by local users for denial of service or privilege escalation.
The econet protocol (PF_ECONET) is unmaintained. There appear to be no published applications for it, and it has never progressed beyond 'experimental' status.
This protocol generally should not be enabled by distributions, since the cost of a security flaw affecting all installed systems presumably outweighs the benefit to the few (if any) legitimate users.
--- drivers/staging/Kconfig | 2 ++ net/Kconfig | 1 - 2 files changed, 2 insertions(+), 1 deletions(-)
drivers/staging/Kconfig +2 -0
@@ -177,5 +177,7 @@ source "drivers/staging/speakup/Kconfig" source "net/decnet/Kconfig" +source "net/econet/Kconfig" + endif # !STAGING_EXCLUDE_BUILD endif # STAGING
net/Kconfig +0 -1
@@ -205,7 +205,6 @@ source "net/ipx/Kconfig" source "drivers/net/appletalk/Kconfig" source "net/x25/Kconfig" source "net/lapb/Kconfig" -source "net/econet/Kconfig" source "net/wanrouter/Kconfig" source "net/phonet/Kconfig" source "net/ieee802154/Kconfig"
Signature · 1 line
1.7.2.3
Quoted 8 lines · On Tue, 23 Nov 2010 03:52:28 +0000 Ben Hutchings <[email protected]> wrote:
Recent review has revealed several bugs in obscure protocol implementations that can be exploited by local users for denial of service or privilege escalation.
The econet protocol (
PF_ECONET) is unmaintained. There appear to be no published applications for it, and it has never progressed beyond 'experimental' status.
Quoted 5 lines
This protocol generally should not be enabled by distributions, since the cost of a security flaw affecting all installed systems presumably outweighs the benefit to the few (if any) legitimate users.
Signed-off-by Ben Hutchings <[email protected]>
This I agree with. Probably the Arcnet devices as well. Most distro's don't enable it anyway.
Quoted 35 lines · Ben Hutchings
Recent review has revealed several bugs in obscure protocol implementations that can be exploited by local users for denial of service or privilege escalation.
The econet protocol (
PF_ECONET) is unmaintained. There appear to be no published applications for it, and it has never progressed beyond 'experimental' status.This protocol generally should not be enabled by distributions, since the cost of a security flaw affecting all installed systems presumably outweighs the benefit to the few (if any) legitimate users.
Signed-off-by Ben Hutchings <[email protected]>--- drivers/staging/Kconfig | 2 ++ net/Kconfig | 1 - 2 files changed, 2 insertions(+), 1 deletions(-)drivers/staging/Kconfig +2
-0@@ -177,5 +177,7 @@ source "drivers/staging/speakup/Kconfig" source "net/decnet/Kconfig" +source "net/econet/Kconfig" + endif # !STAGING_EXCLUDE_BUILD endif # STAGINGnet/Kconfig +0
-0
net/Kconfig source "net/ipx/Kconfig" · line 208
Quoted 4 lines
net/Kconfig +0
-1@@ -205,7 +205,6 @@ source "net/ipx/Kconfig" source "drivers/net/appletalk/Kconfig" source "net/x25/Kconfig" source "net/lapb/Kconfig" -source "net/econet/Kconfig"
No, please move the code itself to drivers/staging/ so we know to then delete it after a few kernel versions.
thanks,
greg k-h