-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2016-12-10 19:23, Chris Laprise wrote: > Given the increased interest in securing domU where possible, I'd > like to know if Qubes Project will be making upstream security > updates to the Linux kernel available to Qubes users on a timely, > regular basis. > > Kernel updates are an issue because users expect to update their > templates to avoid security pitfalls--and most updates from > upstream do come through without issue--but kernels are a different > matter because they are maintained in Qubes dom0 repositories. > > It seems like Qubes could use some improvement in this area, and > I'd like to know what can be done to help it along. > > Chris >
So, the problem is that kernel updates are only coming through after a long delay? Have you been monitoring the delay? How long is it, on average? How much work is required from the devs in order to make each kernel available to users? Does it vary depending on the situation, or is it a fairly routine matter each time? In other words, is the delay because hard work needs to be done each time, or simply because it only happens when the devs remember to do it, and they're usually busy with other things? If it's the latter, we can set up a reminder system of some sort, or we can appoint someone to be the "VM kernel manager" who submits a PR for each new kernel update. Realistically, what kind of improvement would you like to see? In other words, what is the scenario that you would like to see become reality? - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJYTQtaAAoJENtN07w5UDAwx0YP/RhE2rSsgh8B2QWc/+4g+E2d bRkVHn2TpPpr0MZwQNsBPkR0qnXSk1DIt35lgvjjA3nSZxxi2GhPiHvQyWgS155f Sh/IV2k70T9uW4h2e0bIscvoNTKBcZtHNIek7Mi3UcE+eX6O86CwfE7dKg1m39lA OsgA8eVhOse1VqOVvllPu5bp5ZDowFqfFBgk1uBmC/xzqegMFEgkeSWMj4UKMR3p YDVWJdNVTOepGZe+uuMdPBsN1cpDTgZgIFTSTtEHp5B60UMfDdzmGAWuAK+Pw8xo BLM9+ajn9UuXBEFNjkkNcIhiTalzqMWSgqRoI/7mBusY3+V8e2pqhEDrjK//TUiF M+EmTtiJLab/6ncqSd9SopqkZHQj37Ln4AtRyhVtNInm2Fz13E01sjaNDTkeBS75 uBHp8xRiM9/+/e6TJxbBXbfIJPysYqaM2MXW+Lr4GtqgD2eLAsrskXWS0Q3PkV/h kpK2t2rfCsSC+xgNmV7GANQ4GmxhjQkNjor/4WOMvnulY3bJYtVqk+hWKeNUp8Ge +YYIPqbwwG4ldKgI0hQ8+FER4ZjeTBUgqd+1Yvb0SXLPCNVv2QsThM0TXkUSnPQ0 NVg4ailjCi4XM5Xo04IsWqe6m/ulUt0bTAgqAS+Z9WeGCBVo9vBWAT39DCfGekDQ bQ1OGLnQBfpIq9nWP3uk =L7tQ -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To post to this group, send email to qubes-devel@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/a8eb80ae-8e51-6eae-a678-185976ce6c26%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
