From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1422648AbbGYQgP (ORCPT ); Sat, 25 Jul 2015 12:36:15 -0400 Received: from wtarreau.pck.nerim.net ([62.212.114.60]:11298 "EHLO 1wt.eu" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S964801AbbGYQgO (ORCPT ); Sat, 25 Jul 2015 12:36:14 -0400 Date: Sat, 25 Jul 2015 18:35:27 +0200 From: Willy Tarreau To: Andy Lutomirski Cc: Borislav Petkov , Andy Lutomirski , Peter Zijlstra , Steven Rostedt , "security@kernel.org" , X86 ML , Sasha Levin , "linux-kernel@vger.kernel.org" , Konrad Rzeszutek Wilk , Boris Ostrovsky , Andrew Cooper , Jan Beulich , xen-devel Subject: Re: [PATCH v4 2/3] x86/ldt: Make modify_ldt optional Message-ID: <20150725163527.GE17659@1wt.eu> References: <7286d77aa81abc38dc40362e2439861427064f6f.1437802102.git.luto@kernel.org> <20150725091531.GE3427@nazgul.tnic> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Jul 25, 2015 at 09:03:54AM -0700, Andy Lutomirski wrote: > On Sat, Jul 25, 2015 at 2:15 AM, Borislav Petkov wrote: > > Is that "default y" going to turn into a "default n" after a grace > > period? > > Let's see how Willy's default-off sysctl plays out. In the long run, > maybe we'll have it compiled in but runtime-disabled by default. That's the purpose at least at the beginning. > There's a big community of users who *really* like using Wine :) If distro vendors are willing to document a sysctl setting in order to be able to use Wine in exchange for better security, I'm sure most users will still prefer to stay safe. Willy