We must not ignore people who tell us that "there is something
wrong going on here", just because they are unable to analyze it
themselves. Very often where we end up saying "we dont know what's
going on here" it's likely _our_ fault. We also must not hide
behind "please do these 10 easy steps and 2 kernel recompiles and
10 reboots, only takes half a day, and come back to us once you
have the detailed debug data" requests.
-- Ingo Molnar
I was staring in astonishment at the pending sysfs patch pile last
night. Forty syfs patches and twenty-odd patches against driver
core and the kobject layer. That's a huge amount of churn for a
core piece of kernel infrastructure which has been there for four
or five years. Not a good sign. I mean, it's not as if, say, the
CPU scheduler guys keep on rewriting all their junk.
For me, given my threat model and how much my time is worth, life
is too short for SELinux.
-- Ted Ts'o
to post comments)