[PATCH 1/1] UBUNTU: Disable DEVKMEM for all archs on Intrepid

[Tim Gardner]

Amit Kucheria wrote:
> Enabling /dev/kmem is a security risk. Disable it for all kernel flavours.
> 
> Signed-off-by: Amit Kucheria <amit.kucheria at canonical.com>
> ---
>  debian/config/amd64/config |    2 +-
>  debian/config/i386/config  |    2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/debian/config/amd64/config b/debian/config/amd64/config
> index ff25c42..19641ab 100644
> --- a/debian/config/amd64/config
> +++ b/debian/config/amd64/config
> @@ -566,7 +566,7 @@ CONFIG_DEFXX=m
>  # CONFIG_DEFXX_MMIO is not set
>  CONFIG_DELL_RBU=m
>  CONFIG_DETECT_SOFTLOCKUP=y
> -CONFIG_DEVKMEM=y
> +# CONFIG_DEVKMEM is not set
>  CONFIG_DEVPORT=y
>  CONFIG_DEV_APPLETALK=m
>  CONFIG_DE_AOC=y
> diff --git a/debian/config/i386/config b/debian/config/i386/config
> index 2e3116c..29f7ac4 100644
> --- a/debian/config/i386/config
> +++ b/debian/config/i386/config
> @@ -594,7 +594,7 @@ CONFIG_DEFXX=m
>  CONFIG_DELL_RBU=m
>  CONFIG_DEPCA=m
>  CONFIG_DETECT_SOFTLOCKUP=y
> -CONFIG_DEVKMEM=y
> +# CONFIG_DEVKMEM is not set
>  CONFIG_DEVPORT=y
>  CONFIG_DEV_APPLETALK=m
>  CONFIG_DE_AOC=y

ACK

-- 
Tim Gardner tim.gardner at canonical.com