unofficial mirror of bug-guix@gnu.org 
 help / color / mirror / code / Atom feed
* bug#58891: LKRG blocks modprobe due to hardcoded paths
@ 2022-10-30  4:51 DonaldSanders1968 via Bug reports for GNU Guix
  0 siblings, 0 replies; only message in thread
From: DonaldSanders1968 via Bug reports for GNU Guix @ 2022-10-30  4:51 UTC (permalink / raw)
  To: 58891

[-- Attachment #1: Type: text/plain, Size: 600 bytes --]

Hi Guix,

LKRG with default config on Guix system will resist executing modprobe. Its log message is like:

Oct 30 xx:xx:xx localhost vmunix: [ 2534.269558] LKRG: ALERT: BLOCK: UMH: Executing program name /gnu/store/fas8d76ws2xsdaiiyv822qy3tjx2an6x-modprobe

I found it is caused by hardcoded modprobe path in [src/modules/exploit_detection/syscalls/p_call_usermodehelper/p_call_usermodehelper.c](https://github.com/lkrg-org/lkrg/blob/main/src/modules/exploit_detection/syscalls/p_call_usermodehelper/p_call_usermodehelper.c), which includes a whitelist for UMH validation in LKRG.

Kind regards,
Don

[-- Attachment #2: Type: text/html, Size: 1365 bytes --]

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2022-10-30 14:52 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-10-30  4:51 bug#58891: LKRG blocks modprobe due to hardcoded paths DonaldSanders1968 via Bug reports for GNU Guix

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).