lkml.org 
[lkml]   [2004]   [May]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: 2.6.6-mm2

Chris Wright wrote:

> * Andrew Morton (akpm@osdl.org) wrote:
>
>>Christoph Hellwig <hch@infradead.org> wrote:
>>
>>>>+hugetlb_shm_group-sysctl-gid-0-fix.patch
>>>>
>>>> Don't make gid 0 special for hugetlb shm.
>>>
>>>As Oracle has agreed on fixing their DB to use hugetlbfs could we
>>>please stop doctoring around on this broken patch and revert it.
>>
>>Once I'm convinced that kernel.org kernels will be able to run applications
>>which vendor kernels will run, sure.
>
>
> What about something that's just simple and generic? This is similar to
> Andrea's disable_cap_mlock patch and the disabling capabilities patch
> that wli produced back in that thread. It would remove the hack, and
> buy us some time to find better solutions. Downside of course (as all
> of these have) is reduced security value.

I actually like the magic group better. This one means that _anyone_
can DoS the system. Why not just give Oracle its own LSM if this is
what you want to do (that way the nastiness is completely isolated)?

<shameless_plug> My patch (posted a couple hours ago) solves this one
cleanly </shameless_plug>

--And
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:03    [W:0.312 / U:0.276 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site