Messages in this thread | | | From | Andy Lutomirski <> | Date | Wed, 19 Apr 2017 16:16:22 -0700 | Subject | Re: [PATCH v3 1/2] modules:capabilities: automatic module loading restriction |
| |
On Wed, Apr 19, 2017 at 3:20 PM, Djalal Harouni <tixxdz@gmail.com> wrote: > Currently, an explicit call to load or unload kernel modules require > CAP_SYS_MODULE capability. However unprivileged users have always been > able to load some modules using the implicit auto-load operation. An > automatic module loading happens when programs request a kernel feature > from a module that is not loaded. In order to satisfy userspace, the > kernel then automatically load all these required modules.
I like this feature.
--Andy
| |