linux-kernel - Re: [GIT PULL] KVM fix for 3.1-rc5

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CA+5PVA4qTNpHOpr0nC9VyGGg8hCT8OS6F35m_+s=C7QSYLVnMg@mail.gmail.com>
Date:	Tue, 6 Sep 2011 21:19:48 -0400
From:	Josh Boyer <jwboyer@...il.com>
To:	Linus Torvalds <torvalds@...ux-foundation.org>
Cc:	Avi Kivity <avi@...hat.com>, KVM list <kvm@...r.kernel.org>,
	Marcelo Tosatti <mtosatti@...hat.com>,
	linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: [GIT PULL] KVM fix for 3.1-rc5

On Tue, Sep 6, 2011 at 7:20 PM, Linus Torvalds
<torvalds@...ux-foundation.org> wrote:
> On Mon, Sep 5, 2011 at 2:42 AM, Avi Kivity <avi@...hat.com> wrote:
>> Linus, please pull from
>>
>>  git://github.com/avikivity/kvm.git kvm-updates/3.1
>>
>> to receive a fix for a build failure due to a missing instruction size
>> suffix in inline assembly.
>
> Again, please give me a warm and fuzzy feeling that this is really
> Avi, and the right thing to do, rather than just a "please pull from
> this random tree".
>
> It's not that I don't think you are you, but I want people to actually
> *think* about what they are doing and sending me. When you give me a
> kernel.org address, I know you have access to kernel.org, and that
> makes me believe you are you. When you give me a github address, that
> doesn't really mean anything.

To your point, I would think you want that regardless.  I certainly
don't mean to pile on the kernel.org guys, but it was compromised and
likely through a user account.  I'm confident that this is a very rare
occurrence, but it can happen again.  There was another somewhat high
profile hack earlier in the year against vendor-sec as well.

Maybe asking for some extra warm fuzzies from now on wouldn't be a
horrible idea as general practice.

I will now await a reply full of the cold pricklies.

josh
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/