summaryrefslogtreecommitdiff
path: root/metadata/news/2016-08-08-openafs-debug_rodata
diff options
context:
space:
mode:
authorV3n3RiX <venerix@redcorelinux.org>2017-10-09 18:53:29 +0100
committerV3n3RiX <venerix@redcorelinux.org>2017-10-09 18:53:29 +0100
commit4f2d7949f03e1c198bc888f2d05f421d35c57e21 (patch)
treeba5f07bf3f9d22d82e54a462313f5d244036c768 /metadata/news/2016-08-08-openafs-debug_rodata
reinit the tree, so we can have metadata
Diffstat (limited to 'metadata/news/2016-08-08-openafs-debug_rodata')
-rw-r--r--metadata/news/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt30
-rw-r--r--metadata/news/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt.asc17
2 files changed, 47 insertions, 0 deletions
diff --git a/metadata/news/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt b/metadata/news/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt
new file mode 100644
index 000000000000..3997c7df8113
--- /dev/null
+++ b/metadata/news/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt
@@ -0,0 +1,30 @@
+Title: OpenAFS no longer needs kernel option DEBUG_RODATA
+Author: NP-Hardass <NP-Hardass@gentoo.org>
+Author: Andrew Savchenko <bircoph@gentoo.org>
+Content-Type: text/plain
+Posted: 2016-08-08
+Revision: 1
+News-Item-Format: 1.0
+Display-If-Installed: <=net-fs/openafs-kernel-1.6.18.2
+Display-If-Keyword: amd64
+Display-If-Keyword: ~amd64-linux
+Display-If-Keyword: ~sparc
+Display-If-Keyword: x86
+Display-If-Keyword: ~x86-linux
+
+As a result of bug #127084 [1], it was determined that OpenAFS's
+kernel module required that the kernel's data structures be
+read-write (CONFIG_DEBUG_RODATA=n). With recent OpenAFS versions
+this limitation is no longer required. We tested the latest version
+of OpenAFS with Linux kernels from 3.4 till 4.6, and determined that
+OpenAFS kernel module works fine with CONFIG_DEBUG_RODATA=y.
+
+Starting with net-fs/openafs-kernel-1.6.18.2, this condition is no
+longer forced in the ebuild. Considering the security implications
+of having CONFIG_DEBUG_RODATA turned off, it is highly advised that
+you adjust your kernel config accordingly. Please note that the
+default setting for CONFIG_DEBUG_RODATA is "y" and unless you have
+another reason for keeping it disabled, we highly recommend that
+you re-enable CONFIG_DEBUG_RODATA.
+
+[1] https://bugs.gentoo.org/show_bug.cgi?id=127084
diff --git a/metadata/news/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt.asc b/metadata/news/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt.asc
new file mode 100644
index 000000000000..9e3ba907d8b9
--- /dev/null
+++ b/metadata/news/2016-08-08-openafs-debug_rodata/2016-08-08-openafs-debug_rodata.en.txt.asc
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2
+
+iQIcBAABCgAGBQJXqDXyAAoJEPZTWjO6HuSNwz8QALXcJb2DWdAWJvXHCUQnusks
+aqACr77F2ItjbGwDP/CGkzcHrCbZwpiEkwiIoOq4+1vawH5a5ycG5YgBZ4uivJVm
+JMM2MmwSBnVgSiE8agkvRI/bYHEeTw61cUIEPIHyZr2Iznyq6lQT7L0pdC0WCFV0
+OlrIFCZFuQKHRaH+VWQg10zRx44StPQZyBIZGlQESte6qfiH0xw7b5BQfSGSQYJM
+kO90SWnFedYAoO+AFkZTZxlFUwzJLPfwhwxg97GyEZLM/c/W7BV1vGsY52CsgWk8
+1MqBgTILDQZsRhcWewNibjpc7R1onz8kI6IHC91u+HweeM659W5OWfSJacz/AN4L
+9cj9iuoK8IvE0ymtJZO2rAntn7OGSRCJvyhLhJr6D81NEySI4JZiEtL9al85zyoo
+qXQd6lNm4O5bwkpW3Zg4DFniqZIh6aT5vN0Powvf3OY5+EkN33UpofHyuMsGRPR1
+KAnC3QFclu8z1LPGr6Qo87upA3kn8aab7rCQuIJshDJ46MizPbnN+tipH5xC3uQh
+oc3D+oqltwbiswi7MZ6hnOC3HnGJnnzJBB1qbXkeV+0z1YYjwU5Yslody7YdNYKW
+7fJN+4nznyoYQYlSFuZKazuEWXSAd9QawQe0QWXl4nE7aTAFLNZPSLoid05mYRLj
+taTVf+leYGf4kYfwUZdN
+=nrHk
+-----END PGP SIGNATURE-----