From 716ee69d3d58a146d3d317e5f66112f18861328e Mon Sep 17 00:00:00 2001 From: Ben Hutchings Date: Mon, 5 Aug 2019 00:29:11 +0100 Subject: [PATCH] hamradio: Disable auto-loading as mitigation against local exploits Forwarded: not-needed We can mitigate the effect of vulnerabilities in obscure protocols by preventing unprivileged users from loading the modules, so that they are only exploitable on systems where the administrator has chosen to load the protocol. The 'ham' radio protocols (ax25, netrom, rose) are not actively maintained or widely used. Therefore disable auto-loading. Signed-off-by: Ben Hutchings Gbp-Pq: Topic debian Gbp-Pq: Name hamradio-disable-auto-loading-as-mitigation-against-local-exploits.patch --- net/ax25/af_ax25.c | 2 +- net/netrom/af_netrom.c | 2 +- net/rose/af_rose.c | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/net/ax25/af_ax25.c b/net/ax25/af_ax25.c index d6f9fae06a9..baebc2f3daf 100644 --- a/net/ax25/af_ax25.c +++ b/net/ax25/af_ax25.c @@ -2066,7 +2066,7 @@ module_init(ax25_init); MODULE_AUTHOR("Jonathan Naylor G4KLX "); MODULE_DESCRIPTION("The amateur radio AX.25 link layer protocol"); MODULE_LICENSE("GPL"); -MODULE_ALIAS_NETPROTO(PF_AX25); +/* MODULE_ALIAS_NETPROTO(PF_AX25); */ static void __exit ax25_exit(void) { diff --git a/net/netrom/af_netrom.c b/net/netrom/af_netrom.c index 6ee148f0e6d..fa735b53b43 100644 --- a/net/netrom/af_netrom.c +++ b/net/netrom/af_netrom.c @@ -1498,7 +1498,7 @@ MODULE_PARM_DESC(nr_ndevs, "number of NET/ROM devices"); MODULE_AUTHOR("Jonathan Naylor G4KLX "); MODULE_DESCRIPTION("The amateur radio NET/ROM network and transport layer protocol"); MODULE_LICENSE("GPL"); -MODULE_ALIAS_NETPROTO(PF_NETROM); +/* MODULE_ALIAS_NETPROTO(PF_NETROM); */ static void __exit nr_exit(void) { diff --git a/net/rose/af_rose.c b/net/rose/af_rose.c index 59050caab65..9624989a5bd 100644 --- a/net/rose/af_rose.c +++ b/net/rose/af_rose.c @@ -1630,7 +1630,7 @@ MODULE_PARM_DESC(rose_ndevs, "number of ROSE devices"); MODULE_AUTHOR("Jonathan Naylor G4KLX "); MODULE_DESCRIPTION("The amateur radio ROSE network layer protocol"); MODULE_LICENSE("GPL"); -MODULE_ALIAS_NETPROTO(PF_ROSE); +/* MODULE_ALIAS_NETPROTO(PF_ROSE); */ static void __exit rose_exit(void) { -- 2.30.2