removing debugfs

[Ben Hutchings]

On Tue, 2011-01-25 at 12:03 +0100, Stefan Bader wrote:
[...]
> Just to add my 1cent: I also would rather prefer to only disable the acpi part
> and not the whole of debugfs. Not to mount it by default ok, but there is just
> too much useful things in there to track gpu hangs or trace usb traffic that
> helps a lot to debug issues and to have to provide a debug enabled kernel just
> for that seems more waste than the security risk I see from having it there.
> (the paranoid can delete or blacklist the module).

That won't work, as any driver that uses debugfs would not be loadable.
The paranoid will need some way to prevent mounting debugfs even when
the module is loaded.  Could be done with a module parameter.

Ben.

-- 
Ben Hutchings
Once a job is fouled up, anything done to improve it makes it worse.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 828 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20110127/e184b9ab/attachment.sig>