Daniel Axtens c4bc55da28 fs: Disable many filesystems under lockdown
The idea is to permit the following: btrfs, cpio, exfat, ext, f2fs, fat,
hfsplus, iso9660, squash4, tar, xfs and zfs.

The JFS, ReiserFS, romfs, UDF and UFS security vulnerabilities were
reported by Jonathan Bar Or <jonathanbaror@gmail.com>.

Fixes: CVE-2025-0677
Fixes: CVE-2025-0684
Fixes: CVE-2025-0685
Fixes: CVE-2025-0686
Fixes: CVE-2025-0689

Suggested-by: Daniel Axtens <dja@axtens.net>
Signed-off-by: Daniel Axtens <dja@axtens.net>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-02-13 15:45:56 +01:00
..
2011-10-30 16:10:18 +01:00
2025-02-13 15:45:56 +01:00
2022-03-14 15:45:30 +01:00
2011-04-11 18:13:00 +02:00
2022-03-14 15:45:30 +01:00
2011-04-11 08:16:13 +02:00
2010-05-06 11:34:04 +05:30
2012-12-08 20:56:58 +01:00