https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295485
Bug ID: 295485
Summary: zfs.ko
Product: Base System
Version: 15.0-STABLE
Hardware: amd64
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: kern
Assignee: [email protected]
Reporter: [email protected]
Possibly related to #270789
We need a way to block zfs.ko from being autoloaded by tools like puppet and
facter. This is a fairly large module and a recent CVE is exacerbated by
having this module loaded. We're also mostly a virtual machine shop, where the
benefits of zfs memory usage are not great.
At BSDCan last year, Allan Jude (who also works in a puppet shop) suggested
that a sysctl could be devised that could block this behavior.
--
You are receiving this mail because:
You are the assignee for the bug.
