On Thu, Oct 05, 2023 at 06:59:50AM +0200, Jiri Slaby wrote: > On 04. 10. 23, 14:57, Lee Jones wrote: > > > > n_gsm is available on all the systems I have available. The mention of > > > > 'EXPERIMENTAL' in the module description appears to have zero effect on > > > > whether distros choose to make it available or not. If you're saying > > > > that we know this module is BROKEN however, then perhaps we should mark > > > > it as such. > > > > > > Also, I think this requires root to set this line discipline to the > > > console, right? A normal user can't do that, or am I missing a code > > > path here? > > > > I haven't been testing long, but yes, early indications show that root > > is required. > > FWIW I concluded to the same yesterday, so I disputed the connected > CVE-2023-31082. Waiting for mitre's ack/nack. Trying to dispute obviously-wrong CVEs is a never-ending task. Personally, it's fun to see who keeps popping up to attempt to resolve this issue showing what companies have their security policies dictated by a random government authority that can be modified by anyone :) thanks, greg k-h
