From: Xin Long lxin@redhat.com
redhat/rhel_files: move tipc.ko and tipc_diag.ko to modules-extra
JIRA: https://issues.redhat.com/browse/RHEL-23931 Upstream Status: RHEL Specific
There have been a few TIPC CVE bugs and we see no Red Hat customers using TIPC so far. Per Jianwen's request, move TIPC modules to modules-extra, and prevent auto-loading TIPC modules just because an user triggered it. The sysadmin will have to enable it.
Signed-off-by: Xin Long lxin@redhat.com
diff --git a/redhat/rhel_files/def_variants.yaml.rhel b/redhat/rhel_files/def_variants.yaml.rhel index blahblah..blahblah 100644 --- a/redhat/rhel_files/def_variants.yaml.rhel +++ b/redhat/rhel_files/def_variants.yaml.rhel @@ -505,7 +505,7 @@ rules: - net/sctp/.*: modules-extra - net/sunrpc/xprtrdma/rpcrdma.*: modules - net/sunrpc/.*: modules-core - - net/tipc/.*: modules-core + - net/tipc/.*: modules-extra - net/tls/.*: modules-core - net/vmw_vsock/.*: modules-core - net/xdp/.*: modules-core
-- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3096
kernel@lists.fedoraproject.org