Messages in this thread | | | Subject | Re: Local root exploit with kmod and modutils > 2.1.121 | Date | Thu, 16 Nov 2000 18:24:26 +0000 (GMT) | From | Alan Cox <> |
| |
> It is the first. And the second: each user is allowed to refer to this device. > And it is problem of module to allow to load corresponding module or not > to allow this.
Not so.
> It means that test for CAP_SYS_MODULE is illegal, moving pure policy > issue to improper place.
Definitely not so
What matters is whether the user is requesting a module or the kernel is choosing to load a module. In the former case where the user can influence the module name then you need to check CAP_SYS_MODULE in the latter you do not care.
Alan - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org Please read the FAQ at http://www.tux.org/lkml/
| |