Re: Linux 3.2: backports some features from mainline kernel (3.7)?

Hi Your technical blog looks very interesting. Thank You for your blog and maintaining the 3.2 stable series. Best regards.

Re: Linux 3.2: backports some features from mainline kernel (3.7)?

Hello Mr Hutchings Thanks for the explanation of several important issues. It is really good that Debian is, finally, taking security seriously. I mean for example, hardening flags, several compile-time options etc. One of the Wheezy release goal is to update as many packages as possible to use se

Re: Linux 3.2: backports some features from mainline kernel (3.7)?

Hi Mr Hutchings, Could you explain, in short, why it is more secure? It seems, that cryptographically signed modules are something... don't know, more secure, *because before loading the module, the kernel can check the signature and refuse to load any that can't be verified.* ;-) symlink and har

Re: Linux 3.2: backports some features from mainline kernel (3.7)?

Hi, You have written that the sysctl kernel.modules_disabled=1 option is available. I know that, but with cryptographically signed modules the kernel can check the signature and refuse to load any module that can't be verified. Whether this sysctl option offers something similar? By writing, that

Linux 3.2: backports some features from mainline kernel (3.7)?

Hi, I already asked this question on debian-security@ mailing list, but Mr Cyril Brulebois suggested, that a better place to ask this question is a debian-kernel@ mailing list. It is pretty the same question - just copied. Kernel 3.7 is officially out. This Linux release includes many improvement