commit: d71d323f0ac1bd822fb9fee203817237a934dd48 Author: Andrew Savchenko <bircoph <AT> gmail <DOT> com> AuthorDate: Mon Aug 8 07:36:24 2016 +0000 Commit: Andrew Savchenko <bircoph <AT> gentoo <DOT> org> CommitDate: Mon Aug 8 07:36:24 2016 +0000 URL: https://gitweb.gentoo.org/data/gentoo-news.git/commit/?id=d71d323f
Add openafs-debug_rodata news. Discussed in thread [1], no more comments for a week after corrected version was posted [2]. [1] https://archives.gentoo.org/gentoo-dev/message/cd02e2f0aebeb050a71c0484f37cb8ec [2] https://archives.gentoo.org/gentoo-dev/message/2aad07e6936744e594575aa96d259bad .../2016-08-08-openafs-debug_rodata.en.txt | 30 ++++++++++++++++++++++ .../2016-08-08-openafs-debug_rodata.en.txt.asc | 17 ++++++++++++ 2 files changed, 47 insertions(+) diff --git a/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt b/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt new file mode 100644 index 0000000..3997c7d --- /dev/null +++ b/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt @@ -0,0 +1,30 @@ +Title: OpenAFS no longer needs kernel option DEBUG_RODATA +Author: NP-Hardass <np-hard...@gentoo.org> +Author: Andrew Savchenko <birc...@gentoo.org> +Content-Type: text/plain +Posted: 2016-08-08 +Revision: 1 +News-Item-Format: 1.0 +Display-If-Installed: <=net-fs/openafs-kernel-1.6.18.2 +Display-If-Keyword: amd64 +Display-If-Keyword: ~amd64-linux +Display-If-Keyword: ~sparc +Display-If-Keyword: x86 +Display-If-Keyword: ~x86-linux + +As a result of bug #127084 [1], it was determined that OpenAFS's +kernel module required that the kernel's data structures be +read-write (CONFIG_DEBUG_RODATA=n). With recent OpenAFS versions +this limitation is no longer required. We tested the latest version +of OpenAFS with Linux kernels from 3.4 till 4.6, and determined that +OpenAFS kernel module works fine with CONFIG_DEBUG_RODATA=y. + +Starting with net-fs/openafs-kernel-1.6.18.2, this condition is no +longer forced in the ebuild. Considering the security implications +of having CONFIG_DEBUG_RODATA turned off, it is highly advised that +you adjust your kernel config accordingly. Please note that the +default setting for CONFIG_DEBUG_RODATA is "y" and unless you have +another reason for keeping it disabled, we highly recommend that +you re-enable CONFIG_DEBUG_RODATA. + +[1] https://bugs.gentoo.org/show_bug.cgi?id=127084 diff --git a/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt.asc b/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt.asc new file mode 100644 index 0000000..9e3ba90 --- /dev/null +++ b/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt.asc @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2 + +iQIcBAABCgAGBQJXqDXyAAoJEPZTWjO6HuSNwz8QALXcJb2DWdAWJvXHCUQnusks +aqACr77F2ItjbGwDP/CGkzcHrCbZwpiEkwiIoOq4+1vawH5a5ycG5YgBZ4uivJVm +JMM2MmwSBnVgSiE8agkvRI/bYHEeTw61cUIEPIHyZr2Iznyq6lQT7L0pdC0WCFV0 +OlrIFCZFuQKHRaH+VWQg10zRx44StPQZyBIZGlQESte6qfiH0xw7b5BQfSGSQYJM +kO90SWnFedYAoO+AFkZTZxlFUwzJLPfwhwxg97GyEZLM/c/W7BV1vGsY52CsgWk8 +1MqBgTILDQZsRhcWewNibjpc7R1onz8kI6IHC91u+HweeM659W5OWfSJacz/AN4L +9cj9iuoK8IvE0ymtJZO2rAntn7OGSRCJvyhLhJr6D81NEySI4JZiEtL9al85zyoo +qXQd6lNm4O5bwkpW3Zg4DFniqZIh6aT5vN0Powvf3OY5+EkN33UpofHyuMsGRPR1 +KAnC3QFclu8z1LPGr6Qo87upA3kn8aab7rCQuIJshDJ46MizPbnN+tipH5xC3uQh +oc3D+oqltwbiswi7MZ6hnOC3HnGJnnzJBB1qbXkeV+0z1YYjwU5Yslody7YdNYKW +7fJN+4nznyoYQYlSFuZKazuEWXSAd9QawQe0QWXl4nE7aTAFLNZPSLoid05mYRLj +taTVf+leYGf4kYfwUZdN +=nrHk +-----END PGP SIGNATURE-----
