On Tue, Feb 27, 2024 at 08:15:49PM +0000, Richard W.M. Jones wrote:
https://gitlab.com/cki-project/kernel-ark/-/commit/ed5ba266c61e01a52359b5...
Why wasn't this a Fedora change proposal?
Also the justification given for such a major change is very thin.
I'm sure product security can give us some more details of precisely
what exploits will be mitigated, in the change proposal.
You can restore the original behavior by using:
# sysctl kernel.dmesg_restrict=0
However, be aware of the security consequences ;-)
--
Karel Zak <kzak(a)redhat.com>
http://karelzak.blogspot.com