Public bug reported:
To combat all the recent local privilege escalations in various kernel
components, we have:
kernel.modprobe = /usr/local/sbin/modprobe.filtered
in '/etc/sysctl.d/90-modprobe.conf'. This file is included by Dracut in
the initramfs (by '/usr/lib/dracut/modules.d/11systemd-sysctl/module-
setup.sh'). But it doesn't include the argument for 'kernel.modprobe'
(the script). Result: modprobe is broken, MD raid module can't be loaded
on boot; boot failure. Probably applies to other modules too.
The previous initramfs-tools don't have this behavior.
I think the only reasonable fix is to exclude kernel.modprobe from being
included in the initramfs. One alternative is to also take the command,
but that may have requirements that don't exist in the initramfs.
** Affects: dracut (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2161873
Title:
Boot failures because Dracut includes /etc/sysctl.d files though
'systemd-sysctl'
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dracut/+bug/2161873/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
