Post #2707394
2026-05-08 00:16 UTC
@dalias@hachyderm.io @hailey@hails.org killing AF_NETLINK would also kill uevents for udev
which matters less on servers i suppose but i have no idea how systemd systems would react to that
Replies (2)
-
@dalias@hachyderm.io 2026-05-08 00:17
@navi@social.vlhl.dev @hailey@hails.org Do normal user processes need access to that, or just udevd? The topic at hand was not removing AF_NETLINK support just blocking it by policy for users.
-
@hailey@hails.org 2026-05-08 00:38
@navi@social.vlhl.dev @dalias@hachyderm.io with systemd you can relax hardening rules for services which need it. Distros are shipping service units with this kind of hardening already and it stops you from chaining a vuln in those services to something like this