Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #58974 > unrolled thread
| Started by | Yanhao Mo <yanhaocs@gmail.com> |
|---|---|
| First post | 2017-09-22 12:20 +0200 |
| Last post | 2017-09-22 14:30 +0200 |
| Articles | 3 — 3 participants |
Back to article view | Back to linux.debian.kernel
Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE Yanhao Mo <yanhaocs@gmail.com> - 2017-09-22 12:20 +0200
Processed: Re: Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE owner@bugs.debian.org (Debian Bug Tracking System) - 2017-09-22 14:30 +0200
Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE Ben Hutchings <ben@decadent.org.uk> - 2017-09-22 14:30 +0200
| From | Yanhao Mo <yanhaocs@gmail.com> |
|---|---|
| Date | 2017-09-22 12:20 +0200 |
| Subject | Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE |
| Message-ID | <ustdT-4TO-3@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
Source: linux Severity: wishlist Dear Maintaners, CONFIG_SECURITY_WRITABLE_HOOKS is nessesarry for write linux security modules which doesn't compile into vmlinuz. Writing a "linux security module" as a kernel module is impossible without enable this config. Please enable this. It is very appreciated.
[toc] | [next] | [standalone]
| From | owner@bugs.debian.org (Debian Bug Tracking System) |
|---|---|
| Date | 2017-09-22 14:30 +0200 |
| Subject | Processed: Re: Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE |
| Message-ID | <usvfI-62z-13@gated-at.bofh.it> |
| In reply to | #58974 |
Processing control commands: > tag -1 wontfix Bug #876437 [src:linux] linux: Please enable CONFIG_SECURITY_WRITABLE_HOOKS Added tag(s) wontfix. -- 876437: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876437 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2017-09-22 14:30 +0200 |
| Message-ID | <usvfI-62z-15@gated-at.bofh.it> |
| In reply to | #58974 |
[Multipart message — attachments visible in raw view] — view raw
Control: tag -1 wontfix
On Fri, 2017-09-22 at 18:08 +0800, Yanhao Mo wrote:
> Source: linux
> Severity: wishlist
>
> Dear Maintaners,
>
> CONFIG_SECURITY_WRITABLE_HOOKS is nessesarry for write linux security
> modules which doesn't compile into vmlinuz. Writing a "linux security
> module" as a kernel module is impossible without enable this config.
I don't think that's possible anyway.
> Please enable this. It is very appreciated.
This is not a user-configurable Kconfig option, so we can't directly
enable it. The help text for SECURITY_SELINUX_DISABLE, which selects
it, notes that this is bad for security.
So no, we won't do this.
Ben.
--
Ben Hutchings
Horngren's Observation:
Among economists, the real world is often a special case.
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.kernel
csiph-web