[lkml]   [2010]   [Nov]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH v2] Restrict unprivileged access to kernel syslog

    * Andrew Morton <> wrote:

    > OK by me, apart from ...
    > a) I'd question the need for the config option. Are distros really
    > so lame that they can't trust themselves to poke a number into
    > procfs at boot time?

    When it comes to security i personally prefer 'permanent' defaults that is a
    property of the booting image. I'd even change the default for the x86 defconfig for
    example - and we could make this option default-y in the future. (We cannot ever
    make the sysctl default itself default-1, it would break compatibility with old

    > b) we have "dmesg_restrict" and "CONFIG_RESTRICT_DMESG". Less
    > dyslexia, please.

    Good point. CONFIG_DMESG_RESTRICT is the proper hierarchical naming i suspect.



     \ /
      Last update: 2010-11-10 19:13    [W:0.039 / U:41.232 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site