Linus Torvalds writes: (Summary) You don't even have to kill
the machine and make it hard to report to make a user unhappy, just
"the new kernel didn't work for me" will make that user skittish about
upgrading the kernel at all.
upgrading the kernel at all.
And the fix really looks fairly straightforward:
And the fix really looks fairly straightforward:
- when adding hardening features, you as a security person should always see that hardening to be the _endpoint_, but not the immediate goal.
goal.
- when adding hardening features, the first step should *ALWAYS* be "just report it".
upgrading the kernel at all.
And the fix really looks fairly straightforward:
And the fix really looks fairly straightforward:
- when adding hardening features, you as a security person should always see that hardening to be the _endpoint_, but not the immediate goal.
goal.
- when adding hardening features, the first step should *ALWAYS* be "just report it".