hamradio: Disable auto-loading as mitigation against local exploits
authorBen Hutchings <ben@decadent.org.uk>
Sun, 4 Aug 2019 23:29:11 +0000 (00:29 +0100)
committerSalvatore Bonaccorso <carnil@debian.org>
Sat, 25 Jan 2025 20:15:12 +0000 (21:15 +0100)
commite61319c7819da78bfad077992fb93c81dc3d263d
tree77a70d11641d72e8e8965a108714931a14f460e2
parenta3b0313f14d1b834f2ceb79b1e70ec051a9ce64b
hamradio: Disable auto-loading as mitigation against local exploits

Forwarded: not-needed

We can mitigate the effect of vulnerabilities in obscure protocols by
preventing unprivileged users from loading the modules, so that they
are only exploitable on systems where the administrator has chosen to
load the protocol.

The 'ham' radio protocols (ax25, netrom, rose) are not actively
maintained or widely used.  Therefore disable auto-loading.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Gbp-Pq: Topic debian
Gbp-Pq: Name hamradio-disable-auto-loading-as-mitigation-against-local-exploits.patch
net/ax25/af_ax25.c
net/netrom/af_netrom.c
net/rose/af_rose.c