lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <CAGXu5j+KPVRcOJ3Ue9ZQF93GyaDhvCnFCvJ_C3WKCx2=SNdDyg@mail.gmail.com> Date: Mon, 15 Apr 2019 22:50:10 -0500 From: Kees Cook <keescook@...omium.org> To: Steven Rostedt <rostedt@...dmis.org> Cc: Olof Johansson <olof@...om.net>, Alexei Starovoitov <alexei.starovoitov@...il.com>, Joel Fernandes <joelaf@...gle.com>, Joel Fernandes <joel@...lfernandes.org>, Linux Kernel Mailing List <linux-kernel@...r.kernel.org>, Qais Yousef <qais.yousef@....com>, Dietmar Eggemann <dietmar.eggemann@....com>, Manoj Rao <linux@...ojrajarao.com>, Andrew Morton <akpm@...ux-foundation.org>, Alexei Starovoitov <ast@...nel.org>, atish patra <atishp04@...il.com>, Daniel Colascione <dancol@...gle.com>, Dan Williams <dan.j.williams@...el.com>, Greg Kroah-Hartman <gregkh@...uxfoundation.org>, Guenter Roeck <groeck@...omium.org>, Jonathan Corbet <corbet@....net>, Karim Yaghmour <karim.yaghmour@...rsys.com>, Kees Cook <keescook@...omium.org>, Android Kernel Team <kernel-team@...roid.com>, "open list:DOCUMENTATION" <linux-doc@...r.kernel.org>, "open list:KERNEL SELFTEST FRAMEWORK" <linux-kselftest@...r.kernel.org>, linux-trace-devel@...r.kernel.org, Masahiro Yamada <yamada.masahiro@...ionext.com>, Masami Hiramatsu <mhiramat@...nel.org>, Randy Dunlap <rdunlap@...radead.org>, Shuah Khan <shuah@...nel.org>, Yonghong Song <yhs@...com> Subject: Re: [PATCH v5 1/3] Provide in-kernel headers to make extending kernel easier On Mon, Apr 15, 2019 at 9:41 AM Steven Rostedt <rostedt@...dmis.org> wrote: > I agree with this assessment. We shouldn't use config.gz as precedence > for this solution. config.gz should have been in debugfs to begin with, > but I don't believe debugfs was around when config.gz was introduced. > (Don't have time to look into the history of the two). I don't agree with this: /proc/config.gz is used by a lot of tools that do sanity-check of running systems. This isn't _debugging_... it's verifying correct kernel builds. It's a fancy version of checking /proc/version. -- Kees Cook
Powered by blists - more mailing lists