Re: Adding security features (was: Kernel parameters protecting fifos and regular files)

2020-02-03 Thread Marvin Renich
* Richard Laager [200129 19:05]: > On 1/29/20 8:28 AM, Marvin Renich wrote: > There are plenty of shades of > grey in this, and what counts as "minimal", "medium", or "massive" is > going to be at least somewhat subjective. Completely agree. > I'd say that "massive breakage" (breaking lots of

Re: Adding security features (was: Kernel parameters protecting fifos and regular files)

2020-01-29 Thread Richard Laager
[ Note: I have reordered the quoted text blocks. ] On 1/29/20 8:28 AM, Marvin Renich wrote: > On the other hand, I do agree with using unstable and testing to > determine the level of disruption, on the condition that there is a > _commitment_ to removing the feature before stable release if the

Adding security features (was: Kernel parameters protecting fifos and regular files)

2020-01-29 Thread Marvin Renich
I have no opinion about this specific feature; at first glance it looks like it might be a reasonable thing to do. On the other hand, I strongly disagree with this statement as a general rule: > Unless massive breakage is expected, the default should > be the most secure option. This is the