Bug 32232 – CVE-2010-4661: Arbitrary kernel module load
authorDavid Zeuthen <davidz@redhat.com>
Tue, 15 Mar 2011 13:20:44 +0000 (09:20 -0400)
committerDavid Zeuthen <davidz@redhat.com>
Tue, 15 Mar 2011 13:20:44 +0000 (09:20 -0400)
commitc933a929f07421ec747cebb24d5e620fc2b97037
tree3f9756a12857df4858e53bd4297faef77e833333
parentd0cafeb4e9e64fcb660d11a197d8405f28bb5a95
Bug 32232 – CVE-2010-4661: Arbitrary kernel module load

Validate what is passed to the mount(8) command. In particular, only
allow either well-known filesystems, filesystems already loaded or
filesystem explicitly allowed by the administrator via the
/etc/filesystems file.

See https://bugs.freedesktop.org/show_bug.cgi?id=32232 for details.

Signed-off-by: David Zeuthen <davidz@redhat.com>
src/device.c