Mon Oct 28 13:19:50 2019 UTC ()
Disable filemon.

It isn't suited for general use (that is, it poses security risks),
but the existence of the module means it is auto-loaded when /dev/filemon
is opened, which can be done by any user.

Thanks Ilja van Sprundel for the heads up.


(maya)
diff -r1.126 -r1.127 src/distrib/sets/lists/modules/mi
diff -r1.228 -r1.229 src/sys/modules/Makefile
cvs diff -r1.126 -r1.127 src/distrib/sets/lists/modules/mi (expand / switch to unified diff)

--- src/distrib/sets/lists/modules/mi 2019/09/22 22:59:37 1.126
+++ src/distrib/sets/lists/modules/mi 2019/10/28 13:19:50 1.127
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1# $NetBSD: mi,v 1.126 2019/09/22 22:59:37 christos Exp $ 1# $NetBSD: mi,v 1.127 2019/10/28 13:19:50 maya Exp $
2# 2#
3# Note: don't delete entries from here - mark them as "obsolete" instead. 3# Note: don't delete entries from here - mark them as "obsolete" instead.
4# 4#
5# IMPORTANT: When you add a module here, you have to add it twice to 5# IMPORTANT: When you add a module here, you have to add it twice to
6# md.evbppc as well. evbppc does not use mi, because 6# md.evbppc as well. evbppc does not use mi, because
7# powerpc-4xx and powerpc-booke modules are incompatible. 7# powerpc-4xx and powerpc-booke modules are incompatible.
8# Additionally, you may have to add it once more in md.amd64 8# Additionally, you may have to add it once more in md.amd64
9# (for xen) and twice more for i386 (xen and xen-pae). 9# (for xen) and twice more for i386 (xen and xen-pae).
10# Sorry for any inconvenience this may cause, the management. 10# Sorry for any inconvenience this may cause, the management.
11# 11#
12./@MODULEDIR@ base-kernel-modules kmod 12./@MODULEDIR@ base-kernel-modules kmod
13./@MODULEDIR@/aac base-obsolete obsolete 13./@MODULEDIR@/aac base-obsolete obsolete
14./@MODULEDIR@/aac/aac.kmod base-obsolete obsolete 14./@MODULEDIR@/aac/aac.kmod base-obsolete obsolete
@@ -158,28 +158,28 @@ @@ -158,28 +158,28 @@
158./@MODULEDIR@/efs/efs.kmod base-kernel-modules kmod 158./@MODULEDIR@/efs/efs.kmod base-kernel-modules kmod
159./@MODULEDIR@/exec_script base-kernel-modules kmod 159./@MODULEDIR@/exec_script base-kernel-modules kmod
160./@MODULEDIR@/exec_script/exec_script.kmod base-kernel-modules kmod 160./@MODULEDIR@/exec_script/exec_script.kmod base-kernel-modules kmod
161./@MODULEDIR@/ext2fs base-kernel-modules kmod 161./@MODULEDIR@/ext2fs base-kernel-modules kmod
162./@MODULEDIR@/ext2fs/ext2fs.kmod base-kernel-modules kmod 162./@MODULEDIR@/ext2fs/ext2fs.kmod base-kernel-modules kmod
163./@MODULEDIR@/fbt base-obsolete obsolete 163./@MODULEDIR@/fbt base-obsolete obsolete
164./@MODULEDIR@/fbt/fbt.kmod base-obsolete obsolete 164./@MODULEDIR@/fbt/fbt.kmod base-obsolete obsolete
165./@MODULEDIR@/fdesc base-kernel-modules kmod 165./@MODULEDIR@/fdesc base-kernel-modules kmod
166./@MODULEDIR@/fdesc/fdesc.kmod base-kernel-modules kmod 166./@MODULEDIR@/fdesc/fdesc.kmod base-kernel-modules kmod
167./@MODULEDIR@/ffs base-kernel-modules kmod 167./@MODULEDIR@/ffs base-kernel-modules kmod
168./@MODULEDIR@/ffs/ffs.kmod base-kernel-modules kmod 168./@MODULEDIR@/ffs/ffs.kmod base-kernel-modules kmod
169./@MODULEDIR@/filecore base-kernel-modules kmod 169./@MODULEDIR@/filecore base-kernel-modules kmod
170./@MODULEDIR@/filecore/filecore.kmod base-kernel-modules kmod 170./@MODULEDIR@/filecore/filecore.kmod base-kernel-modules kmod
171./@MODULEDIR@/filemon base-kernel-modules kmod 171./@MODULEDIR@/filemon base-obsolete obsolete
172./@MODULEDIR@/filemon/filemon.kmod base-kernel-modules kmod 172./@MODULEDIR@/filemon/filemon.kmod base-obsolete obsolete
173./@MODULEDIR@/flash base-kernel-modules kmod 173./@MODULEDIR@/flash base-kernel-modules kmod
174./@MODULEDIR@/flash/flash.kmod base-kernel-modules kmod 174./@MODULEDIR@/flash/flash.kmod base-kernel-modules kmod
175./@MODULEDIR@/fss base-kernel-modules kmod 175./@MODULEDIR@/fss base-kernel-modules kmod
176./@MODULEDIR@/fss/fss.kmod base-kernel-modules kmod 176./@MODULEDIR@/fss/fss.kmod base-kernel-modules kmod
177./@MODULEDIR@/gpio base-kernel-modules kmod 177./@MODULEDIR@/gpio base-kernel-modules kmod
178./@MODULEDIR@/gpio/gpio.kmod base-kernel-modules kmod 178./@MODULEDIR@/gpio/gpio.kmod base-kernel-modules kmod
179./@MODULEDIR@/gpioiic base-kernel-modules kmod 179./@MODULEDIR@/gpioiic base-kernel-modules kmod
180./@MODULEDIR@/gpioiic/gpioiic.kmod base-kernel-modules kmod 180./@MODULEDIR@/gpioiic/gpioiic.kmod base-kernel-modules kmod
181./@MODULEDIR@/gpioirq base-kernel-modules kmod 181./@MODULEDIR@/gpioirq base-kernel-modules kmod
182./@MODULEDIR@/gpioirq/gpioirq.kmod base-kernel-modules kmod 182./@MODULEDIR@/gpioirq/gpioirq.kmod base-kernel-modules kmod
183./@MODULEDIR@/gpioow base-kernel-modules kmod 183./@MODULEDIR@/gpioow base-kernel-modules kmod
184./@MODULEDIR@/gpioow/gpioow.kmod base-kernel-modules kmod 184./@MODULEDIR@/gpioow/gpioow.kmod base-kernel-modules kmod
185./@MODULEDIR@/gpiopps base-kernel-modules kmod 185./@MODULEDIR@/gpiopps base-kernel-modules kmod
cvs diff -r1.228 -r1.229 src/sys/modules/Makefile (expand / switch to unified diff)

--- src/sys/modules/Makefile 2019/10/28 02:56:40 1.228
+++ src/sys/modules/Makefile 2019/10/28 13:19:50 1.229
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1# $NetBSD: Makefile,v 1.228 2019/10/28 02:56:40 ozaki-r Exp $ 1# $NetBSD: Makefile,v 1.229 2019/10/28 13:19:50 maya Exp $
2 2
3.include <bsd.own.mk> 3.include <bsd.own.mk>
4 4
5# For all platforms 5# For all platforms
6 6
7# Modules for compatability with earlier versions of NetBSD 7# Modules for compatability with earlier versions of NetBSD
8 8
9SUBDIR+= compat_util 9SUBDIR+= compat_util
10SUBDIR+= compat_43 compat_sysctl_09_43 10SUBDIR+= compat_43 compat_sysctl_09_43
11SUBDIR+= compat_09 compat_10 compat_12 compat_13 compat_14 11SUBDIR+= compat_09 compat_10 compat_12 compat_13 compat_14
12SUBDIR+= compat_16 compat_20 compat_30 compat_40 compat_50 12SUBDIR+= compat_16 compat_20 compat_30 compat_40 compat_50
13SUBDIR+= compat_60 compat_70 compat_80 compat_90 13SUBDIR+= compat_60 compat_70 compat_80 compat_90
14 14
@@ -44,27 +44,27 @@ SUBDIR+= crypto @@ -44,27 +44,27 @@ SUBDIR+= crypto
44SUBDIR+= coda 44SUBDIR+= coda
45SUBDIR+= coda5 45SUBDIR+= coda5
46SUBDIR+= coredump 46SUBDIR+= coredump
47SUBDIR+= dbcool 47SUBDIR+= dbcool
48SUBDIR+= des 48SUBDIR+= des
49SUBDIR+= dk_subr 49SUBDIR+= dk_subr
50SUBDIR+= drvctl 50SUBDIR+= drvctl
51SUBDIR+= efs 51SUBDIR+= efs
52SUBDIR+= ext2fs 52SUBDIR+= ext2fs
53SUBDIR+= exec_script 53SUBDIR+= exec_script
54SUBDIR+= fdesc 54SUBDIR+= fdesc
55SUBDIR+= ffs 55SUBDIR+= ffs
56SUBDIR+= filecore 56SUBDIR+= filecore
57SUBDIR+= filemon 57#SUBDIR+= filemon
58SUBDIR+= flash 58SUBDIR+= flash
59SUBDIR+= fss 59SUBDIR+= fss
60SUBDIR+= gpio 60SUBDIR+= gpio
61SUBDIR+= gpioiic 61SUBDIR+= gpioiic
62SUBDIR+= gpioow 62SUBDIR+= gpioow
63SUBDIR+= gpiosim 63SUBDIR+= gpiosim
64SUBDIR+= gpioirq 64SUBDIR+= gpioirq
65SUBDIR+= gpiopps 65SUBDIR+= gpiopps
66SUBDIR+= hfs 66SUBDIR+= hfs
67SUBDIR+= hythygtemp 67SUBDIR+= hythygtemp
68SUBDIR+= si70xxtemp 68SUBDIR+= si70xxtemp
69SUBDIR+= am2315temp 69SUBDIR+= am2315temp
70SUBDIR+= i2cexec 70SUBDIR+= i2cexec