[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <9417ef01-a367-43c7-85f2-1b02c446c160@canonical.com>
Date: Sat, 7 Nov 2026 11:08:44 -0800
From: John Johansen <john.johansen@...onical.com>
To: kernel-hardening@...ts.openwall.com
Subject: Re: [RFC idea] Kernel API Firewall (kaf): subsystem-level attack
surface reduction for the post-AI-CVE era
On 11/6/26 09:08, Greg KH wrote:
> On Fri, Nov 06, 2026 at 08:15:26PM +0900, Nakashima Seiichi wrote:
>> Users are left with three bad choices:
>> a) Wait indefinitely for distro patches
>
> Pick a better distro. Seriously, if the distro you are paying for isn't
> keeping it up to date and secure, what are you paying them for? Seems
no argument there
> like an odd choice to stick with them given you have a contract saying
> they need to abide by it...
>
the "wait for ever" is an exaggeration, at least on the Ubuntu side. There
is a new kernel every week, rebased on current upstream kernels.
Where it can take longer if you make the choice to stay on a kernel no
longer supported by upstream, and then you have to wait for some of the
patches to be backported.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
