Re: [gentoo-user] Kernel modules and security

2019-03-22 Thread Michael Orlitzky
On 3/22/19 10:46 AM, Peter Humphrey wrote: > Hello list, > > Years ago, in the days of Yggdrasil I think, the received wisdom was that > enabling kernel module loading was a bad idea because an attacker might be > able to load malicious software directly into the kernel. No modules --> one >

Re: [gentoo-user] Kernel modules and security

2019-03-22 Thread Andrew Savchenko
On Fri, 22 Mar 2019 14:46:20 + Peter Humphrey wrote: > Hello list, > > Years ago, in the days of Yggdrasil I think, the received wisdom was that > enabling kernel module loading was a bad idea because an attacker might be > able to load malicious software directly into the kernel. No

Re: [gentoo-user] Kernel modules and security

2019-03-22 Thread Rich Freeman
On Fri, Mar 22, 2019 at 10:46 AM Peter Humphrey wrote: > > Years ago, in the days of Yggdrasil I think, the received wisdom was that > enabling kernel module loading was a bad idea because an attacker might be > able to load malicious software directly into the kernel. No modules --> one > more

[gentoo-user] Kernel modules and security

2019-03-22 Thread Peter Humphrey
Hello list, Years ago, in the days of Yggdrasil I think, the received wisdom was that enabling kernel module loading was a bad idea because an attacker might be able to load malicious software directly into the kernel. No modules --> one more attack route closed. What is the current thinking

Re: [gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-16 Thread marco restelli
2017-02-15 16:19 GMT+01:00, Rich Freeman : >> >>> Anytime you see something like root=UUID=* that is being handled by an >>> initramfs. >> >> I understand that this parameter is passed by the kernel to the init >> script inside the initramfs which then uses "busybox findfs" to >>

Re: [gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-15 Thread Rich Freeman
On Wed, Feb 15, 2017 at 5:58 AM, marco restelli wrote: > >> The short version is that the kernel is very limited in what it can >> take in the root= option on the command line, and grub and other >> bootloaders don't do anything to ID the root filesystem other than >> passing

Re: [gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-15 Thread marco restelli
2017-02-13 12:47 GMT+01:00, Johannes Rosenberger : > On 13.02.2017 12:34, Rich Freeman wrote: >> On Mon, Feb 13, 2017 at 5:53 AM, marco restelli >> wrote: >>> Could you suggest any reference about how an initramfs can help making >>> it easier to identify the

Re: [gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-15 Thread marco restelli
2017-02-13 12:34 GMT+01:00, Rich Freeman : > On Mon, Feb 13, 2017 at 5:53 AM, marco restelli > wrote: >> >> Could you suggest any reference about how an initramfs can help making >> it easier to identify the correct root filesystem? Does this >>

Re: [gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-13 Thread Daniel Frey
On 02/13/2017 03:34 AM, Rich Freeman wrote: > Anytime you see something like root=UUID=* that is being handled by an > initramfs. And of course a UUID is more reliable than a device name, > since the latter can change if you add/remove a device, or maybe even > if your firmware is having a bad

Re: [gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-13 Thread Johannes Rosenberger
On 13.02.2017 12:34, Rich Freeman wrote: > On Mon, Feb 13, 2017 at 5:53 AM, marco restelli wrote: >> Could you suggest any reference about how an initramfs can help making >> it easier to identify the correct root filesystem? Does this >> functionality overlap with what grub

Re: [gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-13 Thread Rich Freeman
On Mon, Feb 13, 2017 at 5:53 AM, marco restelli wrote: > > Could you suggest any reference about how an initramfs can help making > it easier to identify the correct root filesystem? Does this > functionality overlap with what grub can do, or is something > different? > The

Re: [gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-13 Thread marco restelli
2017-02-10 13:35 GMT+01:00, Rich Freeman : > On Fri, Feb 10, 2017 at 6:58 AM, marco restelli > wrote: >> Hi all, >>I am trying to understand a bit initramfs and genkernel and I have >> few (basic) questions. > >> - how does genkernel decide which modules

Re: [gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-10 Thread Rich Freeman
On Fri, Feb 10, 2017 at 6:58 AM, marco restelli wrote: > Hi all, >I am trying to understand a bit initramfs and genkernel and I have > few (basic) questions. > > I understand that one must have in the initramfs those modules which > are required to boot the system, for

[gentoo-user] Kernel modules: initramfs vs. /lib/modules

2017-02-10 Thread marco restelli
Hi all, I am trying to understand a bit initramfs and genkernel and I have few (basic) questions. I understand that one must have in the initramfs those modules which are required to boot the system, for instance to access /dev . Now: - can a module be present both in the initramfs and as

Re: [gentoo-user] Kernel Modules

2011-06-16 Thread Stroller
On 15 June 2011, at 19:05, Peter Humphrey wrote: On Wednesday 15 June 2011 17:25:23 Neil Bothwick wrote: On Wed, 15 Jun 2011 17:07:01 +0100, Peter Humphrey wrote: I'd like to use this but I don't have shopt. Which package is it in? If I ask Google I get a list of places to buy T-shirts.

[gentoo-user] Kernel Modules

2011-06-09 Thread Ignas Anikevicius
Hello list, I was wondering if it is possible to have a tool with which it would be possible to have external modules installed for _all_ kernel versions in my computer. Now I am using 2.6.38 kernel, but would like to try 2.6.39 and the thing is that I would like to have tp_smapi and phc-intel

Re: [gentoo-user] Kernel Modules

2011-06-09 Thread YoYo Siska
On Thu, Jun 09, 2011 at 11:52:42AM +0100, Ignas Anikevicius wrote: Hello list, I was wondering if it is possible to have a tool with which it would be possible to have external modules installed for _all_ kernel versions in my computer. Now I am using 2.6.38 kernel, but would like to try

Re: [gentoo-user] Kernel Modules

2011-06-09 Thread Alan McKinnon
Apparently, though unproven, at 12:52 on Thursday 09 June 2011, Ignas Anikevicius did opine thusly: Hello list, I was wondering if it is possible to have a tool with which it would be possible to have external modules installed for _all_ kernel versions in my computer. Now I am using

Re: [gentoo-user] Kernel Modules

2011-06-09 Thread Volker Armin Hemmann
On Thursday 09 June 2011 11:52:42 Ignas Anikevicius wrote: Hello list, I was wondering if it is possible to have a tool with which it would be possible to have external modules installed for _all_ kernel versions in my computer. Now I am using 2.6.38 kernel, but would like to try 2.6.39 and

Re: [gentoo-user] Kernel Modules

2011-06-09 Thread Ignas Anikevicius
On 09/06/11 12:06, Alan McKinnon wrote: why you making so much work for yourself? set the /usr/src/linux symlink to each set of installed sources in turn, run emerge @module-rebuild or run module-rebuild rebuild you could even script it cd /usr/src for I in linux-* do ln -sfn $I

Re: [gentoo-user] Kernel modules not autoloading with 2.6.38-gentoo-r1

2011-04-11 Thread du yang
On Monday 04/11/11 12:57:34 CST, James Wall wrote: Hi all, Has anyone run into an issue where the kernel is not detecting devices? The issue does not show up in 2.6.37 on amd64 testing branch. I just got done re-emerging world to rule out any hidden surprises. Any ideas? TIA, James Wall

Re: [gentoo-user] Kernel modules not autoloading with 2.6.38-gentoo-r1

2011-04-11 Thread James Wall
On Apr 11, 2011 3:42 AM, du yang duyang@gmail.com wrote: On Monday 04/11/11 12:57:34 CST, James Wall wrote: Hi all, Has anyone run into an issue where the kernel is not detecting devices? The issue does not show up in 2.6.37 on amd64 testing branch. I just got done re-emerging world

[gentoo-user] Kernel modules not autoloading with 2.6.38-gentoo-r1

2011-04-10 Thread James Wall
Hi all, Has anyone run into an issue where the kernel is not detecting devices? The issue does not show up in 2.6.37 on amd64 testing branch. I just got done re-emerging world to rule out any hidden surprises. Any ideas? TIA, James Wall