[Bug 295485] need a way to block zfs.ko from being autoloaded by tools like puppet and facter

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295485

--- Comment #8 from Dan Mahoney <[email protected]> ---
(In reply to Mark Millard from comment #7)

Yes, the timing is entirely coincidental.  I spoke to Allan about this like, a
year ago.

However, as mentioned, there's now an exploit with a path that required zfs.ko
be available to exploit it (https://fatgid.io).  That's what's really informing
the timing.

We've been rolling out to openvox, but despite the name change, it's really
still just a close fork of puppet.  This isn't like "sendmail and postfix"
levels different.

If you really want me to replicate this on that package, I can, but at this
point I'm 99 percent sure it happens the same.

-Dan

-- 
You are receiving this mail because:
You are the assignee for the bug.