Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 24 Apr 2017 13:59:48 +0930
From: Rusty Russell <>
To: Djalal Harouni <>, Linux Kernel Mailing List <>, Andy Lutomirski <>, Kees Cook <>, Andrew Morton <>,,,
Cc: Linux API <>, Dongsu Park <>, Casey Schaufler <>, James Morris <>, Paul Moore <>, Tetsuo Handa <>, Greg Kroah-Hartman <>, Jonathan Corbet <>, Jessica Yu <>, Arnaldo Carvalho de Melo <>, Mauro Carvalho Chehab <>, Ingo Molnar <>,, Peter Zijlstra <>, Djalal Harouni <>
Subject: Re: [PATCH v3 2/2] modules:capabilities: add a per-task modules autoload restriction

Djalal Harouni <> writes:
> When value is (1), task must have CAP_SYS_MODULE to be able to trigger a
> module auto-load operation, or CAP_NET_ADMIN for modules with a
> 'netdev-%s' alias.

Sorry, the magic 'netdev-' prefix is a crawling horror.  To do this
properly, you need to hand the capability (if any) from the
request_module() call.  Probably by adding a new request_module_cap and
making request_module() call that, then fixing up the callers.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.