Post #2080103
2026-04-30 12:13 UTC
Uhhhhh the kernel ignores modprobe blacklist for crypto modules. I blacklisted algif_aead and I can still pop a root shell: https://github.com/torvalds/linux/blob/e75a43c7cec459a07d91ed17de4de13ede2b7758/crypto/api.c#L301-L307
Replies (2)
-
@penguin42@mastodon.org.uk 2026-04-30 12:14
@wren6991 If it's a RHEL based kernel that's because it's built in.
-
@leah@blahaj.social 2026-04-30 12:28
@wren6991 that's why the mitigation changes the install handler to /bin/false and doesn't use blacklisting?