[PATCH 1/1] UBUNTU: Disable DEVKMEM for all archs on Intrepid

Amit Kucheria amit.kucheria at canonical.com
Fri Apr 3 03:42:04 UTC 2009


Enabling /dev/kmem is a security risk. Disable it for all kernel flavours.

Signed-off-by: Amit Kucheria <amit.kucheria at canonical.com>
---
 debian/config/amd64/config |    2 +-
 debian/config/i386/config  |    2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/debian/config/amd64/config b/debian/config/amd64/config
index ff25c42..19641ab 100644
--- a/debian/config/amd64/config
+++ b/debian/config/amd64/config
@@ -566,7 +566,7 @@ CONFIG_DEFXX=m
 # CONFIG_DEFXX_MMIO is not set
 CONFIG_DELL_RBU=m
 CONFIG_DETECT_SOFTLOCKUP=y
-CONFIG_DEVKMEM=y
+# CONFIG_DEVKMEM is not set
 CONFIG_DEVPORT=y
 CONFIG_DEV_APPLETALK=m
 CONFIG_DE_AOC=y
diff --git a/debian/config/i386/config b/debian/config/i386/config
index 2e3116c..29f7ac4 100644
--- a/debian/config/i386/config
+++ b/debian/config/i386/config
@@ -594,7 +594,7 @@ CONFIG_DEFXX=m
 CONFIG_DELL_RBU=m
 CONFIG_DEPCA=m
 CONFIG_DETECT_SOFTLOCKUP=y
-CONFIG_DEVKMEM=y
+# CONFIG_DEVKMEM is not set
 CONFIG_DEVPORT=y
 CONFIG_DEV_APPLETALK=m
 CONFIG_DE_AOC=y
-- 
1.5.6.3





More information about the kernel-team mailing list