3 ms·
Correct me if I'm wrong, but I've been under the impression that kernel contributors are not vetted? Only patches are vetted.
by majewsky 7y ago
Correct me if I'm wrong, but I've been under the impression that kernel contributors are not vetted? Only patches are vetted.
- jacquesm 7y agoThat would open up the kernel to malicious contributions. It is always a good idea to know who your counterparty is. There is good precedent to warrant such vigilance: https://www.newscientist.com/article/dn24165-how-nsa-weakens-encryption-to-access-internet-traffic/ https://www.newscientist.com/article/dn24165-how-nsa-weakens... Accidents can never be ruled out but a malicious operator will have far less chance of getting away with something when detected early.
- rcxdude 7y agoYou are mostly correct, there's no real barrier to just anyone submitting a patch. However, the kernel does have a rule against anonymous or pseudonymous contributions, mainly for licensing clarity reasons (not that you need to submit any form of proof of identity).
- StreamBright 7y agoEven the patches are not vetted that much, give the track record of the linux kernel from the security point of view.