Re: Heads up: significant change to fs.protected_regular and fs.protected_fifos sysctls with systemd 241

2019-02-15 Thread Alexander Bokovoy

On to, 14 helmi 2019, Adam Williamson wrote:

On Thu, 2019-02-14 at 12:16 -0800, Adam Williamson wrote:

Hey folks! Just wanted to give the list a heads-up about a significant
change I've just found out about in systemd 241.

There are a couple of sysctls that were apparently introduced with
Linux kernel 4.19, fs.protected_regular and fs.protected_fifos . These
are defined here:


 sigh - I forgot to mention what the change actually *was*. I
guess it's obvious from context, but, for clarity: with systemd 241,
these sysctls default to 1 (on). Previously they defaulted to 0 (off).

I think this change, even if it was an upstream change, warrants a
system-wide Change to Fedora 30. At the very least, it has to be
prominently featured in the release notes.

--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org


Re: Heads up: significant change to fs.protected_regular and fs.protected_fifos sysctls with systemd 241

2019-02-14 Thread Adam Williamson
On Thu, 2019-02-14 at 12:16 -0800, Adam Williamson wrote:
> Hey folks! Just wanted to give the list a heads-up about a significant
> change I've just found out about in systemd 241.
> 
> There are a couple of sysctls that were apparently introduced with
> Linux kernel 4.19, fs.protected_regular and fs.protected_fifos . These
> are defined here:

 sigh - I forgot to mention what the change actually *was*. I
guess it's obvious from context, but, for clarity: with systemd 241,
these sysctls default to 1 (on). Previously they defaulted to 0 (off).
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org