From mboxrd@z Thu Jan 1 00:00:00 1970 From: Willy Tarreau Subject: Re: [PATCH v4 2/3] x86/ldt: Make modify_ldt optional Date: Sat, 25 Jul 2015 18:35:27 +0200 Message-ID: <20150725163527.GE17659__45128.8342629143$1437842239$gmane$org@1wt.eu> References: <7286d77aa81abc38dc40362e2439861427064f6f.1437802102.git.luto@kernel.org> <20150725091531.GE3427@nazgul.tnic> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Andy Lutomirski Cc: "security@kernel.org" , Jan Beulich , Peter Zijlstra , Andrew Cooper , X86 ML , "linux-kernel@vger.kernel.org" , Steven Rostedt , xen-devel , Borislav Petkov , Andy Lutomirski , Sasha Levin , Boris Ostrovsky List-Id: xen-devel@lists.xenproject.org On Sat, Jul 25, 2015 at 09:03:54AM -0700, Andy Lutomirski wrote: > On Sat, Jul 25, 2015 at 2:15 AM, Borislav Petkov wrote: > > Is that "default y" going to turn into a "default n" after a grace > > period? > > Let's see how Willy's default-off sysctl plays out. In the long run, > maybe we'll have it compiled in but runtime-disabled by default. That's the purpose at least at the beginning. > There's a big community of users who *really* like using Wine :) If distro vendors are willing to document a sysctl setting in order to be able to use Wine in exchange for better security, I'm sure most users will still prefer to stay safe. Willy