Linux-Kernel Archive: Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation From: James Morris Date: Thu Oct 26 2017 - 15:06:55 EST Next message: Jarkko Sakkinen: "Re: Fixing CVE-2017-15361" Previous message: Peter Meerwald-Stadler: "Re: [PATCH v2] iio : Add cm3218 smbus ara and acpi support" In reply to: Linus Torvalds: "Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation" Next in thread: John Johansen: "Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation" Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] On Thu, 26 Oct 2017, Linus Torvalds wrote: > On Thu, Oct 26, 2017 at 8:54 PM, James Morris wrote: > > On Thu, 26 Oct 2017, Linus Torvalds wrote: > > > >> I'm *very* unhappy with the security layer as is > > > > What are you unhappy with? > > We had two big _fundamental_ problems this merge window: > > - untested code that clearly didn't do what it claimed it did, and > which caused me to not even accept the main pull request > > - apparmor code that had a regression, where it took three weeks for > that regression to be escalated to me simply because the developer was > denying the regression. > > Tell me why I *shouldn't* be unhappy with the security layer? > > I shouldn't be in the situation where I start reviewing the code and > go "that can't be right". > > And I *definitely* shouldn't be in the situation where I need to come > in three weeks later and tell people what a regression is! Agreed on both counts, and sorry for these problems. -- James Morris Next message: Jarkko Sakkinen: "Re: Fixing CVE-2017-15361" Previous message: Peter Meerwald-Stadler: "Re: [PATCH v2] iio : Add cm3218 smbus ara and acpi support" In reply to: Linus Torvalds: "Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation" Next in thread: John Johansen: "Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation" Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
