[Bug 295485] need a way to block zfs.ko from being autoloaded by tools like puppet and facter (FatGID Vuln / CVE-2026-45250)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295485

--- Comment #31 from Mark Millard <marklmi26-fbsd@yahoo.com> ---
(In reply to Mark Millard from comment #30)

Dan found and reported what commands are in use:

# zpool upgrade -v
and:
# zfs upgrade -v

These both attach to:

/dev/zfs a couple of ways

The also both use the likes of:

__sysctlbyname("vfs.zfs.version.ioctl",21,0x5f5f248ed1dc,0x5f5f248ed1e0,0x0,0)
= 0 (0x0)
and:
__sysctlbyname("vfs.zfs.version.ioctl",21,0x76a54292695c,0x76a542926960,0x0,0)
= 0 (0x0)

Hmm. The description is:

vfs.zfs.version.ioctl: ZFS_IOCTL_VERSION

-- 
You are receiving this mail because:
You are the assignee for the bug.