Re: [Xen-devel] [PATCH v4 2/3] x86/ldt: Make modify_ldt optional

[Willy Tarreau <w@xxxxxx>]

On Sat, Jul 25, 2015 at 09:03:54AM -0700, Andy Lutomirski wrote:
> On Sat, Jul 25, 2015 at 2:15 AM, Borislav Petkov <bp@xxxxxxxxx> wrote:
> > Is that "default y" going to turn into a "default n" after a grace
> > period?
> 
> Let's see how Willy's default-off sysctl plays out.  In the long run,
> maybe we'll have it compiled in but runtime-disabled by default.

That's the purpose at least at the beginning.

> There's a big community of users who *really* like using Wine :)

If distro vendors are willing to document a sysctl setting in order
to be able to use Wine in exchange for better security, I'm sure most
users will still prefer to stay safe.

Willy


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel