ACK: [Unstable 1/1] UBUNTU: [Config]: disable CONFIG_LEGACY_TIOCSTI

Andrei Gherzan andrei.gherzan at canonical.com
Wed Dec 13 13:01:57 UTC 2023


On 23/12/11 05:54PM, Thadeu Lima de Souza Cascardo wrote:
> BugLink: https://bugs.launchpad.net/bugs/2046192
> 
> TIOCSTI has been abused as a malicious privilege escalation mechanism and
> provides little real-world utility these days.
> 
> Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo at canonical.com>
> ---
>  debian.master/config/annotations | 4 +++-
>  1 file changed, 3 insertions(+), 1 deletion(-)
> 
> diff --git a/debian.master/config/annotations b/debian.master/config/annotations
> index 281355930640..debfeda4f37d 100644
> --- a/debian.master/config/annotations
> +++ b/debian.master/config/annotations
> @@ -330,6 +330,9 @@ CONFIG_KVM                                      note<'LP: #1532886'>
>  CONFIG_LATENCYTOP                               policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 'riscv64': 'n', 's390x': 'n'}>
>  CONFIG_LATENCYTOP                               note<'LP: #1655986'>
>  
> +CONFIG_LEGACY_TIOCSTI                           policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 'riscv64': 'n', 's390x': 'n'}>
> +CONFIG_LEGACY_TIOCSTI                           note<'LP:#2046192'>
> +
>  CONFIG_LOAD_PPC_KEYS                            policy<{'ppc64el': 'y'}>
>  CONFIG_LOAD_PPC_KEYS                            note<'LP: #1866909'>
>  
> @@ -7302,7 +7305,6 @@ CONFIG_LED_TRIGGER_PHY                          policy<{'amd64': 'y', 'arm64': '
>  CONFIG_LEGACY_DIRECT_IO                         policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
>  CONFIG_LEGACY_PTYS                              policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
>  CONFIG_LEGACY_PTY_COUNT                         policy<{'amd64': '0', 'arm64': '0', 'armhf': '0', 'ppc64el': '0', 'riscv64': '0', 's390x': '0'}>
> -CONFIG_LEGACY_TIOCSTI                           policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
>  CONFIG_LEGACY_VSYSCALL_NONE                     policy<{'amd64': 'n'}>
>  CONFIG_LEGACY_VSYSCALL_XONLY                    policy<{'amd64': 'y'}>

Acked-by: Andrei Gherzan <andrei.gherzan at canonical.com>

-- 
Andrei Gherzan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20231213/62a4f5b0/attachment.sig>


More information about the kernel-team mailing list