Re: Grrr... modprobe.conf

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2010-09-20 at 11:56 +0200, MichaÅ Piotrowski wrote:
> 2010/9/20 Bryn M. Reeves <bmr@xxxxxxxxxx>:
> > On 09/20/2010 06:43 AM, Ralph Loader wrote:
> >>
> >>> After all these years, something from the fedora repos
> >>> (the only ones I have active in my F14 partition) is still
> >>> creating an (empty) /etc/modprobe.conf file.
> >>
> >> Looks like it's a minor security hole too:
> >
> > Not sure I'd call that minor considering what you can do via entries in
> > that file.
> 
> You can blacklist the firewall modules - it can be critical :)

Why on earth would that be critical? The firewall is just a band-aid. If
it does anything useful, your system was broken (or infected) already.

Seriously, if there is *any* case where the lack of firewall would be
'critical', please file a bug for that.

There are *much* more interesting things that someone could do with
arbitrary write access to /etc/modprobe.conf

-- 
dwmw2

-- 
test mailing list
test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe: 
https://admin.fedoraproject.org/mailman/listinfo/test



[Index of Archives]     [Fedora Desktop]     [Fedora SELinux]     [Photo Sharing]     [Yosemite Forum]     [KDE Users]

  Powered by Linux