removing debugfs
Kees Cook
kees.cook at canonical.com
Fri Jan 28 19:48:45 UTC 2011
Hi Tim,
On Fri, Jan 28, 2011 at 08:14:48AM -0700, Tim Gardner wrote:
> Like Stefan, I'm not quite willing to disable CONFIG_DEBUG_FS across
> the board because it can be very useful. Where there are specific
> vulnerabilities, such as with acpi, I'm quite willing to either fix
> 'em or hack 'em out. In this case just disabling the compile of
> drivers/acpi/debugfs.c looks like it'll work.
Yup, let's do that for now.
Thanks,
-Kees
--
Kees Cook
Ubuntu Security Team
More information about the kernel-team
mailing list