Re: [PATCH v2] net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules
From: Kees Cook <hidden>
Date: 2011-03-02 16:04:12
Also in:
lkml
On Wed, Mar 02, 2011 at 12:33:13AM +0300, Vasiliy Kulikov wrote:
This patch restricts an ability of autoloading modules to netdev modules with explicit aliases. This fixes CVE-2011-1019. ... Signed-off-by: Vasiliy Kulikov <redacted>
Looks good; thanks for sorting this out. Acked-by: Kees Cook <redacted> -Kees -- Kees Cook Ubuntu Security Team