Re: [RFC][PATCH] fs: Limit sys_mount to only loading filesystem modules.

2013-03-03 Thread Kees Cook
On Sun, Mar 3, 2013 at 2:14 AM, Eric W. Biederman wrote: > > Modify the request_module to prefix the file system type with "fs-" > and add aliases to all of the filesystems that can be built as modules > to match. > > A common practice is to build all of the kernel code and leave code > that is

Re: [RFC][PATCH] fs: Limit sys_mount to only loading filesystem modules.

2013-03-03 Thread Serge E. Hallyn
Quoting Eric W. Biederman (ebied...@xmission.com): > > Modify the request_module to prefix the file system type with "fs-" > and add aliases to all of the filesystems that can be built as modules > to match. > > A common practice is to build all of the kernel code and leave code > that is not

[RFC][PATCH] fs: Limit sys_mount to only loading filesystem modules.

2013-03-03 Thread Eric W. Biederman
Modify the request_module to prefix the file system type with "fs-" and add aliases to all of the filesystems that can be built as modules to match. A common practice is to build all of the kernel code and leave code that is not commonly needed as modules, with the result that many users are

[RFC][PATCH] fs: Limit sys_mount to only loading filesystem modules.

2013-03-03 Thread Eric W. Biederman
Modify the request_module to prefix the file system type with fs- and add aliases to all of the filesystems that can be built as modules to match. A common practice is to build all of the kernel code and leave code that is not commonly needed as modules, with the result that many users are

Re: [RFC][PATCH] fs: Limit sys_mount to only loading filesystem modules.

2013-03-03 Thread Serge E. Hallyn
Quoting Eric W. Biederman (ebied...@xmission.com): Modify the request_module to prefix the file system type with fs- and add aliases to all of the filesystems that can be built as modules to match. A common practice is to build all of the kernel code and leave code that is not commonly

Re: [RFC][PATCH] fs: Limit sys_mount to only loading filesystem modules.

2013-03-03 Thread Kees Cook
On Sun, Mar 3, 2013 at 2:14 AM, Eric W. Biederman ebied...@xmission.com wrote: Modify the request_module to prefix the file system type with fs- and add aliases to all of the filesystems that can be built as modules to match. A common practice is to build all of the kernel code and leave