From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail143.messagelabs.com (mail143.messagelabs.com [216.82.254.35]) by kanga.kvack.org (Postfix) with ESMTP id 4BA8D5F0019 for ; Wed, 3 Jun 2009 13:22:58 -0400 (EDT) Date: Wed, 3 Jun 2009 10:24:40 -0700 From: "Larry H." Subject: Re: Security fix for remapping of page 0 (was [PATCH] Change ZERO_SIZE_PTR to point at unmapped space) Message-ID: <20090603172440.GA18561@oblivion.subreption.com> References: <20090531022158.GA9033@oblivion.subreption.com> <20090602203405.GC6701@oblivion.subreption.com> <1244041914.12272.64.camel@localhost.localdomain> <20090603162831.GF6701@oblivion.subreption.com> <4A26A689.1090300@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Sender: owner-linux-mm@kvack.org To: Linus Torvalds Cc: Rik van Riel , Christoph Lameter , Stephen Smalley , linux-mm@kvack.org, Alan Cox , linux-kernel@vger.kernel.org, pageexec@freemail.hu List-ID: On 09:47 Wed 03 Jun , Linus Torvalds wrote: > > > On Wed, 3 Jun 2009, Rik van Riel wrote: > > > > Would anybody paranoid run their system without SELinux? > > You make two very fundamental mistakes. > > The first is to assume that this is about "paranoid" people. Security is > _not_ about people who care deeply about security. It's about everybody. > Look at viruses and DDoS attacks - the "paranoid" people absolutely depend > on the _non_paranoid people being secure too! > > The other mistake is to think that SELinux is sane, or should be the > default. It's a f*cking complex disaster, and makes performance plummet on > some things. I turn it off, and I know lots of other sane people do too. > So the !SElinux case really does need to work. I'm finally glad we start finding points where we both agree. riel is talking from the perspective of someone who deals with RHEL/Fedora... so I could see his inclination towards SELinux over any other possibilities. But people without SELinux must be definitely taken care of, and kept safe whenever possible, if technical circumstances allow this to happen. Larry -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org