Messages in this thread | | | Date | Sun, 16 Nov 2008 17:19:52 +0100 | From | Bernhard Walle <> | Subject | Re: Turn CONFIG_STRICT_DEVMEM in sysctl dev.mem.restricted |
| |
* Arjan van de Ven [2008-11-16 08:03]:
> > the point of the /dev/mem restrictions is to not allow things you know > you don't need, while still allowing X to function where it can access > the crap it does. Now in Bernhard's case he DOES need them, so he > shouldn't use the restrictions.
Right. But shipping two kernel images is a bit too much to turn a restriction on or off. Get away from that "recompile your kernel".
But I get more and more convinced that we really want to just turn that configuration option off. I'm no expert in security, and at some point, I just have to believe what people write.
Regards, Bernhard
| |