Messages in this thread | | | Date | Fri, 26 Oct 2012 14:41:37 -0700 | Subject | Re: [PATCH] VFS: add config options to enable link restrictions | From | Kees Cook <> |
| |
On Fri, Oct 26, 2012 at 1:27 PM, Linus Torvalds <torvalds@linux-foundation.org> wrote: > On Fri, Oct 26, 2012 at 1:23 PM, Kees Cook <keescook@chromium.org> wrote: >> >> I'd like it to be the exception to turn it _off_, rather than the >> exception to turn it on. > > Kees, you don't seem to understand. > > Breaking applications is unacceptable. End of story. It's broken them. > Get over it.
No, I get that. I've been over it. I can handle it being off by default. I just want there to be a way to make it enabled at build time. I'll explore some other options; it's sensible to tie it to other settings/things that are security-sensitive.
-Kees
-- Kees Cook Chrome OS Security
| |