Comment by fguerraz

6 hours ago

Can we kick SMB implementations out of the kernel please? If not, can we please get PHP mainlined in the kernel?

12 comments

fguerraz

Reply
pavon  1 hour ago

It is in a module, so it doesn't create risk for anyone that isn't loading that module. And most distros don't use it by default, you have to go out of you way to configure it.

I do wish distros would start moving more kernel modules into separate packages so it is obvious to security scanners and individual users whether a CVE impacts them or not. I'm sure I've rebooted my computer many times due to kernel packages updates when it probably wasn't needed. And put off security updates for a few days until I was able to reboot, when I could have installed them right away.

ReDress  6 hours ago

SMB was "imported" into the kernel as an optimization for the user-space version - heh

  • kjs3  5 hours ago

    Like when graphics stack and drivers were "imported" into the WinNT kernel as an optimization for the user-space version. And thus began 30 years of "another week, another graphics subsystem crash/vuln".

    • jacquesm  3 hours ago

      Indeed. These are gigantic mistakes. The quest for performance is diametrically opposed to having a secure system. There will always be a price, sometimes a big one for having a system that enforces proper boundaries. In my opinion: if something can be a process then it should be a process.

      5 replies →

Joel_Mckay  3 hours ago

On windows, no one should be running SMB either.

There are network mount options (also include ssh support)

https://rclone.org/install/

And SSH access and remote IFS NFS drive mount to host with winget:

# Run PowerShell as an Administrator.

Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH*'

# Install the OpenSSH Client

Add-WindowsCapability -Online -Name OpenSSH.Client~~~~0.0.1.0

# Install the OpenSSH Server

Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0

Start-Service sshd

Set-Service -Name sshd -StartupType 'Automatic'

# Only allow local or VPN host server access

New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 -RemoteAddress 192.168.1.0/24

winget install frequency403.OpenSSHGUI

winget install -h -e --id "WinFsp.WinFsp"

winget install -h -e --id "SSHFS-Win.SSHFS-Win"

winget install -h -e evsar3.sshfs-win-manager

#As administrator in power shell run to manage ssh keys:

OpenSSH-GUI-win-x64

And free/paid apps for your phone to sync your files automatically over SFTP.

https://filezilla-project.org/download.php?show_all=1

https://play.google.com/store/apps/details?id=cz.bukacek.fil...

https://apps.apple.com/ca/app/photosync-transfer-photos/id41...

https://play.google.com/store/apps/details?id=com.touchbyte....

Stop using SMB, it was always broken on Windows and Linux. =3