Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755750AbZFCRXD (ORCPT ); Wed, 3 Jun 2009 13:23:03 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1755094AbZFCRWz (ORCPT ); Wed, 3 Jun 2009 13:22:55 -0400 Received: from oblivion.subreption.com ([66.240.236.22]:34221 "EHLO mail.subreption.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754638AbZFCRWy (ORCPT ); Wed, 3 Jun 2009 13:22:54 -0400 Date: Wed, 3 Jun 2009 10:24:40 -0700 From: "Larry H." To: Linus Torvalds Cc: Rik van Riel , Christoph Lameter , Stephen Smalley , linux-mm@kvack.org, Alan Cox , linux-kernel@vger.kernel.org, pageexec@freemail.hu Subject: Re: Security fix for remapping of page 0 (was [PATCH] Change ZERO_SIZE_PTR to point at unmapped space) Message-ID: <20090603172440.GA18561@oblivion.subreption.com> References: <20090531022158.GA9033@oblivion.subreption.com> <20090602203405.GC6701@oblivion.subreption.com> <1244041914.12272.64.camel@localhost.localdomain> <20090603162831.GF6701@oblivion.subreption.com> <4A26A689.1090300@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Organization: Subreption LLC Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1382 Lines: 34 On 09:47 Wed 03 Jun , Linus Torvalds wrote: > > > On Wed, 3 Jun 2009, Rik van Riel wrote: > > > > Would anybody paranoid run their system without SELinux? > > You make two very fundamental mistakes. > > The first is to assume that this is about "paranoid" people. Security is > _not_ about people who care deeply about security. It's about everybody. > Look at viruses and DDoS attacks - the "paranoid" people absolutely depend > on the _non_paranoid people being secure too! > > The other mistake is to think that SELinux is sane, or should be the > default. It's a f*cking complex disaster, and makes performance plummet on > some things. I turn it off, and I know lots of other sane people do too. > So the !SElinux case really does need to work. I'm finally glad we start finding points where we both agree. riel is talking from the perspective of someone who deals with RHEL/Fedora... so I could see his inclination towards SELinux over any other possibilities. But people without SELinux must be definitely taken care of, and kept safe whenever possible, if technical circumstances allow this to happen. Larry -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/