6 Dec
2011
6 Dec
'11
14:58
Hi, On Tue, 6 Dec 2011, Marcus Meissner wrote:
A secure Linux server sadly should act more like a nuclear power plant as break ins will cause fallout than a herb garden.
I think it would be reasonable for a server to not mount debugfs by default. If it's a test server (or something else than a server) where it's expected to do profiling it could be mounted. Perhaps it would be an idea to not mount debugfs by default, but only when perf is installed. What this means for the default for different products I don't know. Possibly SLES, don't mount; SLED/openSUSE, mount. Ciao, Michael. -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kernel+owner@opensuse.org