Re: [Fedora 09/19] binfmt_elf: Elf executable signature verification

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 2013-09-05 at 11:50 -0400, Vivek Goyal wrote:
> On Thu, Sep 05, 2013 at 11:06:10AM -0400, Eric Paris wrote:

> > And it's just plain wrong.  CONFIG_IMA requires CONFIG_TCG_TPM.  But
> > select is not recursive.  So can end up with a config where IMA is on,
> > but TPM is off...
> 
> I fail to understand that why it is wrong.
> 
> - If select is not recursive, then it is limitation of select. Either
>   it needs to be fixed or as a workaround one can put explicit select
>   for nested dependencies here.

It is a limitation of select. It's not changing. You can put explicit
selects for dependencies of dependencies, but then when someone adds an
additional dependency to one of your dependencies your code suddenly
breaks. It's a bad idea. Don't do it.

-- 
Matthew Garrett <matthew.garrett@xxxxxxxxxx>
_______________________________________________
kernel mailing list
kernel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/kernel





[Index of Archives]     [Fedora General Discussion]     [Older Fedora Users Archive]     [Fedora Advisory Board]     [Fedora Security]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Mentors]     [Fedora Package Announce]     [Fedora Package Review]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Coolkey]     [Yum Users]     [Tux]     [Yosemite News]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [USB]     [Asterisk PBX]

  Powered by Linux