Comment by fguerraz
5 hours ago
Can we kick SMB implementations out of the kernel please? If not, can we please get PHP mainlined in the kernel?
5 hours ago
Can we kick SMB implementations out of the kernel please? If not, can we please get PHP mainlined in the kernel?
It is in a module, so it doesn't create risk for anyone that isn't loading that module. And most distros don't use it by default, you have to go out of you way to configure it.
I do wish distros would start moving more kernel modules into separate packages so it is obvious to security scanners and individual users whether a CVE impacts them or not. I'm sure I've rebooted my computer many times due to kernel packages updates when it probably wasn't needed. And put off security updates for a few days until I was able to reboot, when I could have installed them right away.
SMB was "imported" into the kernel as an optimization for the user-space version - heh
Like when graphics stack and drivers were "imported" into the WinNT kernel as an optimization for the user-space version. And thus began 30 years of "another week, another graphics subsystem crash/vuln".
Indeed. These are gigantic mistakes. The quest for performance is diametrically opposed to having a secure system. There will always be a price, sometimes a big one for having a system that enforces proper boundaries. In my opinion: if something can be a process then it should be a process.
3 replies →
On windows, no one should be running SMB either.
There are network mount options (also include ssh support)
https://rclone.org/install/
And SSH access and remote IFS NFS drive mount to host with winget:
# Run PowerShell as an Administrator.
Get-WindowsCapability -Online | Where-Object Name -like 'OpenSSH*'
# Install the OpenSSH Client
Add-WindowsCapability -Online -Name OpenSSH.Client~~~~0.0.1.0
# Install the OpenSSH Server
Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0
Start-Service sshd
Set-Service -Name sshd -StartupType 'Automatic'
# Only allow local or VPN host server access
New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH Server (sshd)' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 -RemoteAddress 192.168.1.0/24
winget install frequency403.OpenSSHGUI
winget install -h -e --id "WinFsp.WinFsp"
winget install -h -e --id "SSHFS-Win.SSHFS-Win"
winget install -h -e evsar3.sshfs-win-manager
#As administrator in power shell run to manage ssh keys:
OpenSSH-GUI-win-x64
And free/paid apps for your phone to sync your files automatically over SFTP.
https://filezilla-project.org/download.php?show_all=1
https://play.google.com/store/apps/details?id=cz.bukacek.fil...
https://apps.apple.com/ca/app/photosync-transfer-photos/id41...
https://play.google.com/store/apps/details?id=com.touchbyte....
Stop using SMB, it was always broken on Windows and Linux. =3