hamradio: Disable auto-loading as mitigation against local exploits
authorBen Hutchings <ben@decadent.org.uk>
Sun, 4 Aug 2019 23:29:11 +0000 (00:29 +0100)
committerRaspbian forward porter <root@raspbian.org>
Tue, 23 Jul 2024 19:44:04 +0000 (19:44 +0000)
commit159da7c39316153b9f9ab1db1399458cf303fa3f
tree3a163571d7a7678836fb9be3049aab962e9c906b
parent4d2790b4b9931d6b6f8f8bd7cf911008d740cb00
hamradio: Disable auto-loading as mitigation against local exploits

Forwarded: not-needed

We can mitigate the effect of vulnerabilities in obscure protocols by
preventing unprivileged users from loading the modules, so that they
are only exploitable on systems where the administrator has chosen to
load the protocol.

The 'ham' radio protocols (ax25, netrom, rose) are not actively
maintained or widely used.  Therefore disable auto-loading.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Gbp-Pq: Topic debian
Gbp-Pq: Name hamradio-disable-auto-loading-as-mitigation-against-local-exploits.patch
net/ax25/af_ax25.c
net/netrom/af_netrom.c
net/rose/af_rose.c