Re: Linux 3.2: backports some features from mainline kernel (3.7)?

2012-12-21 Thread daniel curtis
Hi, You have written that the sysctl kernel.modules_disabled=1 option is available. I know that, but with cryptographically signed modules the kernel can check the signature and refuse to load any module that can't be verified. Whether this sysctl option offers something similar? By writing,

Bug#696425: additional log entries

2012-12-21 Thread Riegel Bernhard
We enabled verbose logging of qla2xxx driver and get these messages, where the 6 lines Dec 21 12:59:02 ivt-namoluk kernel: [251878.590150] qla2xxx [:04:00.0]-382b:11: Dec 21 12:59:02 ivt-namoluk kernel: [251878.590155] qla2xxx [:04:00.0]-381c:11: Check condition Sense data,

Re: Linux 3.2: backports some features from mainline kernel (3.7)?

2012-12-21 Thread Ben Hutchings
On Fri, 2012-12-21 at 12:45 +0100, daniel curtis wrote: Hi, You have written that the sysctl kernel.modules_disabled=1 option is available. I know that, but with cryptographically signed modules the kernel can check the signature and refuse to load any module that can't be verified.

Re: Bug#696038: ITP: compat-wireless-3.5.4 -- backported linux wireless drivers

2012-12-21 Thread Ben Hutchings
On Mon, 2012-12-17 at 12:41 +1100, Jayen Ashar wrote: On Mon, Dec 17, 2012 at 12:07 PM, Ben Hutchings b...@decadent.org.uk wrote: On Mon, 2012-12-17 at 11:14 +1100, Jayen Ashar wrote: Hi kernel team, I intend to package the stable versions of compat-wireless and compat-drivers (when

Re: Linux 3.2: backports some features from mainline kernel (3.7)?

2012-12-21 Thread daniel curtis
Hi Mr Hutchings, Could you explain, in short, why it is more secure? It seems, that cryptographically signed modules are something... don't know, more secure, *because before loading the module, the kernel can check the signature and refuse to load any that can't be verified.* ;-) symlink and

Re: Linux 3.2: backports some features from mainline kernel (3.7)?

2012-12-21 Thread Ben Hutchings
On Fri, 2012-12-21 at 17:48 +0100, daniel curtis wrote: Hi Mr Hutchings, Could you explain, in short, why it is more secure? It seems, that cryptographically signed modules are something... don't know, more secure, because before loading the module, the kernel can check the signature and

Bug#696505: linux-image-3.2.0-4-amd64: saa7146 based DVB-C card causes repeated error messages

2012-12-21 Thread p_body
Package: src:linux Version: 3.2.32-1 Severity: normal Dear Maintainer, I have some problems getting my system running stable after upgrading it to wheezy. My system is used as a vdr and is equipped with multiple DVB cards. It seems that the 2 installed Terratec Cinergy 1200 DVB-C (saa-7146)