Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932302AbaJNVVc (ORCPT ); Tue, 14 Oct 2014 17:21:32 -0400 Received: from mail-lb0-f170.google.com ([209.85.217.170]:61560 "EHLO mail-lb0-f170.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751078AbaJNVVa (ORCPT ); Tue, 14 Oct 2014 17:21:30 -0400 MIME-Version: 1.0 In-Reply-To: <20141014140052.2f114c158ffe6cd953020f1c@linux-foundation.org> References: <5c6381879bea68aebb13530442f1cf8a052be97f.1411958379.git.luto@amacapital.net> <542B4DA3.5080105@gmail.com> <542B519B.6010001@landley.net> <542B5E44.40303@gmail.com> <542B7200.6030902@landley.net> <20141001180510.GA28540@cloud> <20141014140052.2f114c158ffe6cd953020f1c@linux-foundation.org> From: Andy Lutomirski Date: Tue, 14 Oct 2014 14:21:08 -0700 Message-ID: Subject: Re: [PATCH v5] init: Disable defaults if init= fails To: Andrew Morton Cc: Josh Triplett , Rob Landley , Frank Rowand , "linux-kernel@vger.kernel.org" , Chuck Ebbert , Randy Dunlap , Shuah Khan Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Oct 14, 2014 at 2:00 PM, Andrew Morton wrote: > On Wed, 1 Oct 2014 11:13:14 -0700 Andy Lutomirski wrote: > >> On Wed, Oct 1, 2014 at 11:05 AM, wrote: >> > On Tue, Sep 30, 2014 at 09:53:56PM -0700, Andy Lutomirski wrote: >> >> I significantly prefer default N. Scripts that play with init= really >> >> don't want the fallback, and I can imagine contexts in which it could >> >> be a security problem. >> > >> > While I certainly would prefer the non-fallback behavior for init as >> > well, standard kernel practice has typically been to use "default y" for >> > previously built-in features that become configurable. And I'd >> > certainly prefer a compile-time configuration option like this (even >> > with default y) over a "strictinit" kernel command-line option. >> > >> >> Fair enough. >> >> So: "default y" for a release or two, then switch the default? Having >> default y will annoy virtme, though it's not the end of the world. >> Virtme is intended to work with more-or-less-normal kernels. >> > > Adding another Kconfig option is tiresome. What was wrong with strictinit=? The consensus seems to be that adding a non-default option to get sensible behavior would be unfortunate. Also, I don't like strictinit=, since backwards-compatible setups will have to do init=foo strictinit=foo. My original proposal was init=foo strictinit. TBH, my preference would be to make strict mode unconditional. http://xkcd.com/1172/ --Andy -- Andy Lutomirski AMA Capital Management, LLC -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/