On Tue, 20 Dec 2016, Jiri Kosina wrote: > I stay totally unconvinced that such kind of countermeasure brings any > value whatsoever. Could you please bring up a particular usecase, where > you have complete control over kernel memory, and still the only > possible exploit factor is redirecting usermodhelper? It feels like > rather random shot into darkness.
If we want to make usermod helper really secure, perhaps the best way to go would be to completely nuke it and handle everyhting in udev; that'd be quite some work though, especially so that we don't break all the corner cases of module autoloading (request_module() and such). Thanks, -- Jiri Kosina SUSE Labs
