5 ms·
Patch now: Serious Linux kernel security hole uncovered
- sacnoradhq 4y agoAh yes, the grand monolithic kernel Swiss-army dumping ground for every bit of code and feature "because performance". Shoving every server feature and software hook into the kernel without protections is an obvious and avoidable attack surface. If you want secure systems, don't run Linux because it can't miraculously transform into a formally-verified, capabilities-secure, MAC+DAC, transactional microkernel ecosystem.
- feet 4y agoAren't some kernels compiled with certain features disabled? You can easily customize your kernel build on gentoo