Mailinglist Archive: opensuse-factory (633 mails)

< Previous Next >
Re: [opensuse-factory] Re: [PLEASE SPEAK UP] Disabling legacy file systems by default?
On 1/31/19 3:50 PM, Jim Henderson wrote:
See Jeff's answer, Carlos. I'm not the one making the change.

But I'd also be inclined to RTFM for information like that, too. If I
need a filesystem that isn't installed, my approach would be to look to
see if it was included in the kernel package (which it sounds like it
would be), and then to look at why it isn't auto-loading.

That seems like common sense to me.

What doesn't seem like common sense to me is to load it on millions of
installations where it isn't needed because a hundred (thousand, whatever
small percentage use OS/2 in dual-boot configs with openSUSE) can't be
bothered to uncomment a line in a blacklist file.

I think there's a misunderstanding here. The OS/2 modules aren't loaded
on millions of installations where it isn't needed. The autoloading
stuff doesn't load all of the file system modules -- it autoloads
modules as they're needed. The problem is that they can be triggered by
events that the admin generally wants to allow, like inserting a USB
device or allowing users to mount file systems manually (e.g.
singularity, or in containers). So say you have an unprivileged user
craft an hpfs file system that exploits a lack of input validation and
it escalates into privileged access.


Jeff Mahoney
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups