On 27.02.2012 07:04, Richard Laager wrote:
On Mon, 2012-02-27 at 00:01 -0600, Richard Laager wrote:
I haven't verified that the kernel itself refuses to create/load
such a pool.
In any case, what is the threat here? If someone hand-crafts such a
pool, they still have to get the administrator to import it.
Even if the system is automatically importing pools, they'd still have
to have physical access to, for example, plug in a USB device with the
evil pool.
A USB stick "forgotten" in a public place can do wonders.
--
Regards
Vladimir 'φ-coder/phcoder' Serbinenko
_______________________________________________
Grub-devel mailing list
Grub-devel@gnu.org
https://lists.gnu.org/mailman/listinfo/grub-devel
