Messages in this thread | | | Subject | Re: [patch 0/5] Support for sanitization flag in low-level page allocator | From | Peter Zijlstra <> | Date | Sat, 30 May 2009 16:45:37 +0200 |
| |
On Sat, 2009-05-30 at 15:30 +0100, Alan Cox wrote: > > Right, so the whole point is to minimize the impact of actual bugs, > > right? So why not focus on fixing those actual bugs? Can we create tools > > to help us find such bugs faster? We use sparse for a lot of static > > checking, we create things like lockdep and kmemcheck to dynamically > > find trouble. > > > > Can we instead of working around a problem, fix the actual problem? > > Why do cars have crashworthiness and seatbelts ? Why not fix the actual > problem (driving errors) ? I mean lets face it they make the vehicle > heavier, less fuel efficient, less fun and more annoying to use.
We can't find every crash bug either, yet we still ship the kernel and people actually use it too.
What makes these security bugs so much more important than all the other ones?
As to the kernel not knowing what might or might not be secure, that's right, userspace proglet should take their bit of responsibility as well, we can't fix this in the kernel alone.
As long as that openoffice or firefox instance keeps running, there's nothing in the world the kernel can do to make it more secure.
If you really write documents that sekrit you simply shouldn't be using such software but use an editor that is written by people as paranoid as seems to be advocated here.
| |