[Crash-utility] Re: Turn CONFIG_STRICT_DEVMEM in sysctl dev.mem.restricted
Bernhard Walle
bwalle at suse.de
Sun Nov 16 16:19:52 UTC 2008
* Arjan van de Ven [2008-11-16 08:03]:
>
> the point of the /dev/mem restrictions is to not allow things you know
> you don't need, while still allowing X to function where it can access
> the crap it does. Now in Bernhard's case he DOES need them, so he
> shouldn't use the restrictions.
Right. But shipping two kernel images is a bit too much to turn a
restriction on or off. Get away from that "recompile your kernel".
But I get more and more convinced that we really want to just turn that
configuration option off. I'm no expert in security, and at some point,
I just have to believe what people write.
Regards,
Bernhard
More information about the Crash-utility
mailing list