why modprobe is not secure compare to insmod?

Question

In my organisation - Embedded system, we are asked not to use modprobe - the binary is disabled in the busy box. However, we are asked to use insmod for it. I don't understand the security issue in using modprobe. Can somebody please explain the reasoning? Thanks for your replies.

Answer 1

A long time ago the way modprobe worked led to some security risks. Look here for more info. They have since been fixed, but the perception continues that modprobe needs to be avoided. Also in embedded world where software does not get updated as frequently there might be systems where this threat still holds.