lkml.org 
[lkml]   [2008]   [Apr]   [28]   [last100]   RSS-feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
Complete thread (EXPERIMENTAL)
/
DateMon, 28 Apr 2008 12:29:53 +0200
FromAndi Kleen <>
SubjectRe: A system for rebootless kernel security updates
Digg This
Jeff Arnold wrote:

I'm certainly interested in bringing the code up to kernel coding standards (for example, I'd be happy to address any issues with the code that are brought to my attention). I'm not sure whether submitting it for mainline makes sense since the software doesn't significantly benefit from being bundled with the kernel.

To be honest you weren't the first to come up with something like this (although you're the first to post to l-k as far as I know). But the usual problem of something that is kept out of tree is that it eventually bitrots and gets forgotten. The only sane way to make such extensions a generically usable linux feature is to merge them to mainline.
Instead, it might be more important to 1) package the userspace update-construction software for common Linux distributions to make it easily available to interested users, and 2) to provide binary kernel updates for common distribution kernels so that users can simply sign up and get fewer "your machine needs to be rebooted now for an update to take effect" notifications.

(2) is a incredibly large amount of work longer time. And when distributions merge your feature they become committed to it so even if you go away they would still need to maintain it on their own. Since they understand how much work this is they likely won't do it in the first place. Really it's far better to just merge if you want it to make it out of the "toy" stage.

-Andi



\
ISP Services
Valid XHTML 1.0!\ /
Valid CSS! Last update: 2008-04-28 12:33    [W:1.010 / U:0.020 seconds]
©2003-2005 Jasper Spaans