[gentoo-dev] Re: Re: turning off a default compile option

[Duncan]

Greg KH posted <20040705200509.GB18900@×××××.com>, excerpted below,  on
Mon, 05 Jul 2004 13:05:09 -0700:

> On Mon, Jul 05, 2004 at 09:33:34AM -0700, Duncan wrote:
>> That's not a sufficient test.  Mainline 2.6 kernels have standard Linux
>> security capabilities broken out into their own module, now.  Thus, it
>> can be compiled in as traditional, compiled as a module (my
>> configuration, with it specifically loaded at boot, since the kernel
>> isn't smart enough to auto-load it on its own, yet)
>
> And how would you expect such a "auto-load" system to work for the
> capabilities module?

I really don't know.  I really don't know how the kernel knows to load a
LOT of the modules, but it does.

Here's what I'd /suppose/.

When BIND for instance attempted to load, and asked for a (generic)
capacity not present in the kernel, instead of the kernel simply saying
that capacity (generic sense, altho in this case it applies to the
capacities module, specifically, as well) isn't available, it would check
for the module in the standard location, and load it if it found it, then
supply the requested (generic) capacity.

Of course, from my simple viewpoint, that's no different than what
happens now, when a (generic) capacity from one of the auto-loading
modules is requested, causing it to be "auto-magically" loaded. 
Obviously, I'm missing something, but I'm not sure exactly what.  All I
know is that Capabilities can be modulized, now, but the first time I
tried it (on Mandrake, which I'm switching from), BIND had a fit, so I had
to go put it on the list to load specifically.

BTW, thanks for the reply.  It's been interesting at times, watching
people respond to your posts, not having /any/ idea that you ARE one of
the kernel developers, indeed, UDEV wouldn't be the same without you.  <g>
You don't wear it on your sleeve, or in a sig, like some would, and your
name doesn't quite stand out like "Linus" would. =:^) 

(There's an interesting object lesson in studying the pictures of, say,
Bill Gates when he had that pie thrown at him, against, say, Linus sitting
on the dunk tank board.  That ordinary user availability is one reason I'm
here and no longer on an MS platform.  I'd consider the fact that you
don't find it necessary to put your kernel connections in your sig, a
similar mark of humbleness and availability to the ordinary user, tho
others may simply find it confusing.)

-- 
Duncan - List replies preferred.   No HTML msgs.
"They that can give up essential liberty to obtain a little
temporary safety, deserve neither liberty nor safety." --
Benjamin Franklin



--
gentoo-dev@g.o mailing list