[Drbd-dev] Patch for an up-to-date script/patch-kernel

[Anthony.D'Ambrosio at ins.com]

Thanks also for the fix and thumbs up on the core Linux merge! (We discovered the resulting kernel build errors, and being a good lazy developer figured you folks would fix it and moved on to some other tasks while we waited.  Thanks to Guillaume for the fix.)

We patch for the same reason.

Anthony
________________________________________
From: drbd-dev-bounces at lists.linbit.com [drbd-dev-bounces at lists.linbit.com] On Behalf Of Guillaume Plessis [gui at moolfreet.com]
Sent: Tuesday, August 18, 2009 5:16 PM
To: drbd-dev at lists.linbit.com
Subject: Re: [Drbd-dev] Patch for an up-to-date script/patch-kernel

Hello,

I use the patch method to avoid CONFIG_MODULES to be set.
That's one more way to prevent malicious kernel modules to be loaded on risky machines (web servers with unsecure PHP application => www-data shell access => privilege escalation => malicious module loaded).

Thanks for the patch having been applyed and good news that DRBD is getting merged to Linux upstream!

--
Guillaume Plessis



2009/8/18 Philipp Reisner <philipp.reisner at linbit.com<mailto:philipp.reisner at linbit.com>>

Whow the second patch of this kind within a few days. I never expected
that people actually patch DRBD into their kernels...

I have applied it.

Other than that we aim to get DRBD merged to Linux upstream with the
2.6.32 release. You can track out integration work from here:

git://git.drbd.org/linux-2.6-drbd.git<http://git.drbd.org/linux-2.6-drbd.git>

-Phil