Re: [PATCH] kconfig: remove EXPERT from CHECKPOINT_RESTORE
From: Kees Cook
Date: Sat Jul 14 2018 - 00:44:26 EST
On Fri, Jul 13, 2018 at 1:55 PM, Andrew Morton
<akpm@xxxxxxxxxxxxxxxxxxxx> wrote:
> On Thu, 12 Jul 2018 11:33:33 -0500 ebiederm@xxxxxxxxxxxx (Eric W. Biederman) wrote:
>> What is the value of disabling this functionality ever?
>>
>> Is there any reason why we don't just delete CONFIG_CHECKPOINT_RESTORE
>> entirely?
>
> For the vast number of Linux machines which aren't servers? Check out
> some defconfigs - only one of arm's 119 defconfigs selects it.
Right, and I would bet the minification folks would like to keep it
out of their builds too. I think we should keep the config.
-Kees
--
Kees Cook
Pixel Security