On Fri Jan 31 18:44 +0300, Andrey Borzenkov wrote:
> 
> to remind - currently almost none of the security options in secure 
> kernel are enabled by default - they have to be manually turned with 
> sysctl.
> 
> this makes secure kernel just faked promise. Installing it does not
> give any more security (well, a bit more) than in normal kernel.
> 
> trusted, it can be enabled, but majority of people do not even
> know about it.
> 
> I ask once more - the patch that enables all configured security
> settings is two lines. Ater that people can do what they wish -
> enable or disable at will, but it will boot up as secure as you have
> configured it.

Perhaps the security features could be enabled by running an initscript
which turns on the features through the sysctls?

-- 
Levi Ramsey
[EMAIL PROTECTED]               [EMAIL PROTECTED]

GPG Fingerprint: 354C 7A02 77C5 9EE7 8538  4E8D DCD9 B4B0 DC35 67CD
Currently playing:  Sheena Easton - For Your Eyes Only
Linux 2.4.21pre4-1mdk
 11:10:00  up  3:27,  6 users,  load average: 1.52, 0.77, 0.58

Reply via email to