More modutils: It's probably worse.
Quoted 11 lines · David Schleef
Quoted 8 lines · Olaf Kirch
Quoted 3 lines · Michal Zalewski
Maybe I am missing something, but at least for me, modprobe vulnerabilities are exploitable via privledged networking services, nothing more.
Maybe not. ncpfs for instance has an ioctl that seems to allow unprivileged users to specify a character set (codepage in m$speak) that's requested via
load_nls(), which in turn does aThen it looks like the driver is broken, not modutils.
Well, you can use this ioctl only before ncp filesystem gets to life, but yes, as this call is always done by mount process, I'll add
if (!capable(CAP_SYS_ADMIN))
return -EPERM;
here. But I still do not see any problem, as ncpfs limits charset/codepage length to 20 chars (+ NUL terminator), and nobody told me that it is not possible to use " or - in codepage name ;-)
Best regards,
Petr Vandrovec [email protected]
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected]
Please read the FAQ at http://www.tux.org/lkml/
test11-pre5 breaks vmware
Hi Petr,
You probably noticed this already but I just wanted to bring it to your attention that /usr/bin/vmware-config.pl script needs updating since the flags in /proc/cpuinfo is now called "features" so it otherwise fails complaining that my 2xP6 has no tsc. Trivial change but still worthy of propagating into your latest .tar.gz file for 2.4.x
Regards,
Tigran
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected]
Please read the FAQ at http://www.tux.org/lkml/