Messages in this thread | | | Subject | Re: secure computing for 2.6.7 | Date | Sun, 01 Aug 2004 23:17:19 -0400 | From | Horst von Brand <> |
| |
Andrea Arcangeli <andrea@suse.de> said:
[...]
> note this isn't a build number (the features in 2.6.10 don't matter at > all, the only thing it matters is that all security bugs up to 3503 are > included).
Pray tell, how do you know if a random "compiler warning fix" isn't a plug for an exploitable hole, and if a "security fix" really does fix a real security problem that can be abused?
Truth is, you can never know. So, this degenerates into sequential patch numbering, which is completely hopeless. -- Dr. Horst H. von Brand User #22616 counter.li.org Departamento de Informatica Fono: +56 32 654431 Universidad Tecnica Federico Santa Maria +56 32 654239 Casilla 110-V, Valparaiso, Chile Fax: +56 32 797513 - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |