On Mon, 21 Nov 2022 16:29:54 +0100 KP Singh <kpsingh@xxxxxxxxxx> wrote: > I am not sure how they can circumvent security since this needs root / > root equivalent permissions. Fault injection is actually a very useful > debugging tool. On ChromeOS, we even consider root untrusted and lock down pretty much all privileged activities (like loading modules and such). As you said. It's a good debugging tool. Not something to allow in production environments. Or at the very least, allow admins to disable it. -- Steve
