3 ms·
So, I'm wondering why it's not upstream in mainline.
by justinjlynn 7y ago
So, I'm wondering why it's not upstream in mainline.
- yjftsjthsd-h 7y agoProbably the usual reasons; security-minded patchsets make the kernel more attack resistant, but do so by changing things in ways that trade off against performance or compatibility, and Linux is obsessive about compatibility and cares about performance. I'm not going to say that one approach is objectively better or worse; it's just tradeoffs, and upstream/vanilla Linux prefers a different set of tradeoffs than PAX/GRsecurity/etc.
- staticassertion 7y agoPolitics.
- justinjlynn 7y agoThat applies to everything - it's not a reason, it's an excuse. More specifically, I meant - what was the technical rationale for its exclusion?
- staticassertion 7y agoNone. It is all politics.