Gentoo Archives: gentoo-dev

From: Andrew Savchenko <bircoph@g.o>
To: gentoo-dev@l.g.o
Cc: NP-Hardass <NP-Hardass@g.o>
Subject: [gentoo-dev] Re: News Item: OpenAFS no longer needs kernel option DEBUG_RODATA
Date: Mon, 01 Aug 2016 11:09:12
In Reply to: [gentoo-dev] News Item: OpenAFS no longer needs kernel option DEBUG_RODATA by NP-Hardass
1 Hi,
3 On Wed, 20 Jul 2016 13:13:49 -0400 NP-Hardass wrote:
4 > This is the first draft of a news item describing a packaging change for
5 > OpenAFS so that we no longer require the DEBUG_RODATA be turned off.
7 This is a second try with rewording of the first paragraph, since
8 it was suggested that it is a bit awkward.
10 Title: OpenAFS no longer needs kernel option DEBUG_RODATA
11 Author: NP-Hardass <NP-Hardass@g.o>
12 Author: Andrew Savchenko <bircoph@g.o>
13 Content-Type: text/plain
14 Posted: 2016-07-23
15 Revision: 1
16 News-Item-Format: 1.0
17 Display-If-Installed: <=net-fs/openafs-kernel-
18 Display-If-Keyword: amd64
19 Display-If-Keyword: ~amd64-linux
20 Display-If-Keyword: ~sparc
21 Display-If-Keyword: x86
22 Display-If-Keyword: ~x86-linux
24 As a result of bug #127084 [1], it was determined that OpenAFS's
25 kernel module required that the kernel's data structures be
26 read-write (CONFIG_DEBUG_RODATA=n). With recent OpenAFS versions
27 this limitation is no longer required. We tested the latest version
28 of OpenAFS with Linux kernels from 3.4 till 4.6, and determined that
29 OpenAFS kernel module works fine with CONFIG_DEBUG_RODATA=y.
31 Starting with net-fs/openafs-kernel-, this condition is no
32 longer forced in the ebuild. Considering the security implications
33 of having CONFIG_DEBUG_RODATA turned off, it is highly advised that
34 you adjust your kernel config accordingly. Please note that the
35 default setting for CONFIG_DEBUG_RODATA is "y" and unless you have
36 another reason for keeping it disabled, we highly recommend that
37 you re-enable CONFIG_DEBUG_RODATA.
39 [1]
41 Best regards,
42 Andrew Savchenko