Re: [ANNOUNCE] linux-stable security tree

2016-04-12 Thread Eddie Chapman
On 12/04/16 13:52, Willy Tarreau wrote: On Tue, Apr 12, 2016 at 01:31:21PM +0100, Eddie Chapman wrote: None-the-less, I applaud and thank Sasha for this new effort, and I personally will find it very useful. Yes, the lines between bug fix and security fix are very blurred, and so this tree won

Re: [ANNOUNCE] linux-stable security tree

2016-04-12 Thread Willy Tarreau
Hi Eddie, On Tue, Apr 12, 2016 at 01:31:21PM +0100, Eddie Chapman wrote: > None-the-less, I applaud and thank Sasha for this new effort, and I > personally will find it very useful. Yes, the lines between bug fix and > security fix are very blurred, and so this tree won't have every "security" >

Re: [ANNOUNCE] linux-stable security tree

2016-04-12 Thread Eddie Chapman
I'd like to add my 2c here as a mere user of many of the stable trees for many years in my projects. The stable trees are excellent. The quality of the people selecting patches and the selection process is excellent. I've rarely been on the bad end of a regression. I've always used stable ker

Re: [ANNOUNCE] linux-stable security tree

2016-04-12 Thread Willy Tarreau
On Mon, Apr 11, 2016 at 11:35:08PM -0700, Greg KH wrote: > On Tue, Apr 12, 2016 at 08:22:37AM +0200, Willy Tarreau wrote: > > I think we may have more of an issue educating our users than an issue > > with the code we distribute. > > I think that's the issue here, combined with users that just don

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Greg KH
On Tue, Apr 12, 2016 at 08:22:37AM +0200, Willy Tarreau wrote: > I think we may have more of an issue educating our users than an issue > with the code we distribute. I think that's the issue here, combined with users that just don't want to upgrade as it's "hard" for them. There's nothing we can

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Willy Tarreau
On Mon, Apr 11, 2016 at 06:48:32PM -0400, Sasha Levin wrote: > As this suggests, we don't only fix bugs in stable trees, we also introduce > a fair amount of new ones. Sure, and the older the kernel, the higher the number of bugs reintroduced due to a faulty backport (often relying on a missing pa

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Sasha Levin
On 04/11/2016 05:17 PM, Willy Tarreau wrote: > Hi Sasha, > > On Mon, Apr 11, 2016 at 04:38:17PM -0400, Sasha Levin wrote: >>> How are you >>> going to judge which driver fixes to take and which not to? Why not >>> take them all if they fix bugs? >> >> Because some fixes introduce bug on their own

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Willy Tarreau
Hi Sasha, On Mon, Apr 11, 2016 at 04:38:17PM -0400, Sasha Levin wrote: > > How are you > > going to judge which driver fixes to take and which not to? Why not > > take them all if they fix bugs? > > Because some fixes introduce bug on their own? Take a look at how many > commits in the stable tr

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Sasha Levin
On 04/11/2016 04:09 PM, Greg KH wrote: > On Mon, Apr 11, 2016 at 02:58:37PM -0400, Sasha Levin wrote: >> On 04/11/2016 02:41 PM, Greg KH wrote: >>> On Mon, Apr 11, 2016 at 01:53:41PM -0400, Sasha Levin wrote: Quite a few users of the stable trees pointed out that on complex deployments,

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Greg KH
On Mon, Apr 11, 2016 at 02:58:37PM -0400, Sasha Levin wrote: > On 04/11/2016 02:41 PM, Greg KH wrote: > > On Mon, Apr 11, 2016 at 01:53:41PM -0400, Sasha Levin wrote: > >> Hi all, > >> > >> > >> I'd like to announce the linux-stable security tree project. The purpose > >> is to create a derivative

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Jeff Merkey
On 4/11/16, Sasha Levin wrote: > On 04/11/2016 02:34 PM, Jeff Merkey wrote: >> On 4/11/16, Sasha Levin wrote: >>> Hi all, >>> >>> >>> I'd like to announce the linux-stable security tree project. The purpose >>> is to create a derivative tree from the regular stable tree that would >>> contain onl

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Sasha Levin
On 04/11/2016 02:34 PM, Jeff Merkey wrote: > On 4/11/16, Sasha Levin wrote: >> Hi all, >> >> >> I'd like to announce the linux-stable security tree project. The purpose >> is to create a derivative tree from the regular stable tree that would >> contain only commits that fix security vulnerabiliti

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Richard Weinberger
On Mon, Apr 11, 2016 at 8:34 PM, Jeff Merkey wrote: > On 4/11/16, Sasha Levin wrote: >> Hi all, >> >> >> I'd like to announce the linux-stable security tree project. The purpose >> is to create a derivative tree from the regular stable tree that would >> contain only commits that fix security vul

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Sasha Levin
On 04/11/2016 02:17 PM, Jeff Merkey wrote: > On 4/11/16, Sasha Levin wrote: >> Hi all, >> >> >> I'd like to announce the linux-stable security tree project. The purpose >> is to create a derivative tree from the regular stable tree that would >> contain only commits that fix security vulnerabiliti

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Sasha Levin
On 04/11/2016 02:41 PM, Greg KH wrote: > On Mon, Apr 11, 2016 at 01:53:41PM -0400, Sasha Levin wrote: >> Hi all, >> >> >> I'd like to announce the linux-stable security tree project. The purpose >> is to create a derivative tree from the regular stable tree that would >> contain only commits that f

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Greg KH
On Mon, Apr 11, 2016 at 01:53:41PM -0400, Sasha Levin wrote: > Hi all, > > > I'd like to announce the linux-stable security tree project. The purpose > is to create a derivative tree from the regular stable tree that would > contain only commits that fix security vulnerabilities. And how are you

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Jeff Merkey
On 4/11/16, Sasha Levin wrote: > Hi all, > > > I'd like to announce the linux-stable security tree project. The purpose > is to create a derivative tree from the regular stable tree that would > contain only commits that fix security vulnerabilities. > > Quite a few users of the stable trees point

Re: [ANNOUNCE] linux-stable security tree

2016-04-11 Thread Jeff Merkey
On 4/11/16, Sasha Levin wrote: > Hi all, > > > I'd like to announce the linux-stable security tree project. The purpose > is to create a derivative tree from the regular stable tree that would > contain only commits that fix security vulnerabilities. > > Quite a few users of the stable trees point