lkrg icon indicating copy to clipboard operation
lkrg copied to clipboard

LKRG blocks bpfilter_umh

Open geaaru opened this issue 2 years ago • 3 comments

Hi, I integrated LKRG with Macaroni OS (that is a Gentoo/Funtoo-based system) and I'm opening this issue just to understand if this is an issue or not:

[105287.146863] LKRG: ALERT: BLOCK: UMH: Executing program name bpfilter_umh
[105287.203415] LKRG: ALERT: BLOCK: UMH: Executing program name bpfilter_umh

This message starts to be generated when LXD is started probably because it tries to use nftable that is processed by bpfilter_umh (if I understood correctly the behavior of bpfilter_umh). So the question is: is it correct that LKRG blocks bpfilter_umh execution?

Disabling UMH validation quiets kernel messages but I'm not sure that this is correct.

# sysctl -a | grep umh
lkrg.umh_enforce = 1
lkrg.umh_validate = 0

Thanks for any feedback

geaaru avatar Feb 28 '23 18:02 geaaru