[Crash-utility] Re: Turn CONFIG_STRICT_DEVMEM in sysctl dev.mem.restricted
* Arjan van de Ven [2008-11-16 08:03]:
the point of the /dev/mem restrictions is to not allow things you know
you don't need, while still allowing X to function where it can access
the crap it does. Now in Bernhard's case he DOES need them, so he
shouldn't use the restrictions.
Right. But shipping two kernel images is a bit too much to turn a
restriction on or off. Get away from that "recompile your kernel".
But I get more and more convinced that we really want to just turn that
configuration option off. I'm no expert in security, and at some point,
I just have to believe what people write.
Regards,
Bernhard