3 ms·
> Oracle or not, sticking closer to the upstream kernel is not a bad way to manage an “enterprise” kernel. This is probably a lot better than expecting it to
by indymike 3y ago
> Oracle or not, sticking closer to the upstream kernel is not a bad way to manage an “enterprise” kernel.
This is probably a lot better than expecting it to be possible to maintain a secure release with a level of compatibility guarantee for 10+ years.
- deleted 3y ago[deleted]
- dralley 3y agoMaybe, but it's not obvious. There are plenty of novel vulnerabilities in interfaces like io_uring and so forth. It's not that those features are bad, I'm just saying that there are tradeoffs to always getting the new stuff. Maybe the compromise solution is to use newer kernels but keep certain features turned off until they "bake" properly.