Page MenuHomeFreeBSD
Differential D42768

Do not install kernel and modules as executables, they are not
ClosedPublic
Actions

Authored by kib on Nov 25 2023, 1:50 PM.
Tags
None
Referenced Files
Unknown Object (File)
May 7 2024, 2:08 PM
Unknown Object (File)
Apr 29 2024, 3:32 AM
Unknown Object (File)
Mar 13 2024, 1:43 PM
Unknown Object (File)
Mar 13 2024, 1:43 PM
Unknown Object (File)
Mar 13 2024, 1:43 PM
Unknown Object (File)
Mar 10 2024, 7:47 AM
Unknown Object (File)
Mar 4 2024, 12:33 PM
Unknown Object (File)
Feb 15 2024, 10:35 AM
View All 12 Files
Subscribers
bdrewery

Details

Reviewers
imp
emaste
kevans
Commits
rGa9758e46473b: Do not install kernel and modules with executable access bit set
rGd3849ec3c9e7: Set installed kernel and driver files access modes using KMODMODE var
Summary

Also set installed kernel and driver files access modes using KMODMODE var

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

kib created this revision.Nov 25 2023, 1:50 PM
Herald added a subscriber: bdrewery. · View Herald TranscriptNov 25 2023, 1:50 PM
kib requested review of this revision.Nov 25 2023, 1:50 PM
imp accepted this revision.Nov 25 2023, 5:05 PM

As far as I know, neither the boot loader, nor the kld system calls will check.
I can't think of anything that will get cranky over this change...

This revision is now accepted and ready to land.Nov 25 2023, 5:05 PM
emaste accepted this revision.Nov 25 2023, 5:18 PM
Closed by commit rGd3849ec3c9e7: Set installed kernel and driver files access modes using KMODMODE var (authored by kib). · Explain WhyNov 25 2023, 6:48 PM
This revision was automatically updated to reflect the committed changes.
kib added a commit: rGd3849ec3c9e7: Set installed kernel and driver files access modes using KMODMODE var.
kib added a commit: rGa9758e46473b: Do not install kernel and modules with executable access bit set.

Revision Contents
Changeset List

PathSize
sys/
conf/
10 lines

Diff 130582

View Options

sys/conf/kern.post.mk

Loading...