lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Fri, 22 Feb 2008 18:59:14 -0500
From:	Dave Jones <davej@...hat.com>
To:	Greg KH <greg@...ah.com>
Cc:	linux-kernel@...r.kernel.org, sam@...nborg.org,
	arjan@...radead.org, gregkh@...e.de, stable@...nel.org,
	stable-commits@...r.kernel.org
Subject: Re: [stable] patch
	kbuild-allow-fstack-protector-to-take-effect.patch added to
	2.6.24-stable tree

On Fri, Feb 22, 2008 at 03:42:16PM -0800, Greg Kroah-Hartman wrote:

 > >  > I thought that thread was for the much larger patches, not just this
 > >  > Makefile change.
 > > 
 > > At the least we'll likely want to also pick up the other stack protector fixes
 > > that went into .25rc if we turn it on in .24
 > 
 > Hm, that sounds like a new feature :)
 > 
 > I thought the makefile change was just a bugfix in the broken makefile.

Well, it is. But it'll cause it to enable something that has been broken for a while.
FWIW, I think having the stack protector reenabled in -stable is a worthwhile goal,
but only once it's stabilised for a while in the development tree.

My fear by just reenabling this for -stable is that when distros push out updates
based on the latest -stable, we'll see more systems like James' problematic system.

	Dave

-- 
http://www.codemonkey.org.uk
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ