[Bug 295485] need a way to block zfs.ko from being autoloaded by tools like puppet and facter (FatGID Vuln / CVE-2026-45250)
[email protected] Sun, 21 Jun 2026 16:43:49 +0000
| Newsgroups | gmane.os.freebsd.devel.file-systems |
|---|---|
| Message-ID | <[email protected]/bugzilla/> |
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295485 --- Comment #34 from Mark Millard <[email protected]> --- (In reply to Mark Millard from comment #32) https://github.com/openzfs/zfs/pull/18694/changes/3c971d9b219ac135767802c5c014fdd687dacf5b has been proposed for committal upstream. On Linux, zpool upgrade -v does use results from the kernel module involved: /sys/module/zfs/features.pool is used. So this change is FreeBSD specific and Linux would still load the kernel module. The zfs upgrade -v change is more general since Linux does not use kernel module results. -- You are receiving this mail because: You are the assignee for the bug.