2010/9/20 Michał Piotrowski <mkkp...@gmail.com>:
> 2010/9/20 Bryn M. Reeves <b...@redhat.com>:
>> On 09/20/2010 01:37 PM, Tom Horsley wrote:
>>> On Mon, 20 Sep 2010 11:56:56 +0200
>>> Michał Piotrowski wrote:
>>>
>>>> You can blacklist the firewall modules - it can be critical :)
>>>
>>> Actually, I think you can run any arbitrary command to
>>> load a module,
>
> Or pass any parameter to a module.
>
>> so it is probably a gigantic security
>>> hole.
>
> Yeah - but it depends on conditions, system configuration etc. It can
> be treated as "minor issue", "major issue", "high risk vulnerability"
> or "gigantic security hole" - depends on system configuration and
> other things. Let's CC devel list.

Well depends on the cirumstances.

As the file is supposed to be obsolete anyway ... we should just make
modprobe ignore it ;)
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Reply via email to