From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stephen Hemminger Subject: Re: [PATCH 2/3] econet: Move to staging Date: Mon, 22 Nov 2010 20:32:36 -0800 Message-ID: <20101122203236.029c86e3@nehalam> References: <1290484348.6770.1329.camel@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: David Miller , Greg Kroah-Hartman , netdev , devel@driverdev.osuosl.org, Debian kernel maintainers To: Ben Hutchings Return-path: Received: from mail.vyatta.com ([76.74.103.46]:56420 "EHLO mail.vyatta.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751750Ab0KWEci (ORCPT ); Mon, 22 Nov 2010 23:32:38 -0500 In-Reply-To: <1290484348.6770.1329.camel@localhost> Sender: netdev-owner@vger.kernel.org List-ID: On Tue, 23 Nov 2010 03:52:28 +0000 Ben Hutchings wrote: > Recent review has revealed several bugs in obscure protocol > implementations that can be exploited by local users for denial of > service or privilege escalation. > > The econet protocol (PF_ECONET) is unmaintained. There appear to be > no published applications for it, and it has never progressed beyond > 'experimental' status. > > This protocol generally should not be enabled by distributions, since > the cost of a security flaw affecting all installed systems presumably > outweighs the benefit to the few (if any) legitimate users. > > Signed-off-by: Ben Hutchings This I agree with. Probably the Arcnet devices as well. Most distro's don't enable it anyway.