On Mon, 4 Sept 2023 at 00:55, Michal Hocko <mhocko@xxxxxxxx> wrote:
>
> Sooner or later this will become an
> unreviewable mess so the value of init_on_alloc will become very
> dubious.
The value of init_on_alloc is *already* very dubious.
Exactly because people will turn it off, because it hurts performance
so much - and in pointless ways.
You do realize that distributions - well, at least Fedora - simply
don't turn INIT_ON_ALLOC_DEFAULT_ON on at all?
So the current state of init_on_alloc is that nobody sane uses it. You
have to think you're special to enable it, because it is *so* bad.
Security people need to realize that the primary point of computing is
NEVER EVER security. Security is entirely pointless without a usable
system.
Unless security people realize that they are always secondary, they
aren't security people, they are just random wankers.
And people who state this truism had better not get shamed for
standing up to stupidity.
Linus
