lkml.org 
[lkml]   [2021]   [Sep]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH 08/19] tcp: authopt: Disable via sysctl by default
    From
    Date
    On 9/21/21 10:14 AM, Leonard Crestez wrote:
    > This is mainly intended to protect against local privilege escalations
    > through a rarely used feature so it is deliberately not namespaced.
    >
    > Enforcement is only at the setsockopt level, this should be enough to
    > ensure that the tcp_authopt_needed static key never turns on.
    >
    > No effort is made to handle disabling when the feature is already in
    > use.
    >

    MD5 does not require a sysctl to use it, so why should this auth mechanism?

    \
     
     \ /
      Last update: 2021-09-25 03:57    [W:2.479 / U:0.000 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site