mdeslaur raised some good points about ksmbd that I think are compelling
enough to remove it from this blocklist:

- it doesn't match the "insert a shady usb" attack vector
- my opinion on it might be overly shaded from 2021 status 
https://lore.kernel.org/lkml/202109221850.003A16EC1@keescook/#t and not 
reflective of the years of effort since
- it's on the way up, the others are on the way down

furthermore,

- since it's not really a filesystem in the way the others are
filesystems, even if we still decide to blocklist it in a future
release, an administrator might not "look" for it in this specific file.

Are there any other changes that we should consider before we upload
this?

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2114945

Title:
  block less common filesystems by default

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kmod/+bug/2114945/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to