Message-ID: <20120726014648.XNQR0.67798.root@hrndva-web05-z02>
Date: Wed, 25 Jul 2012 21:46:48 -0400
From: <deant@hawaii.rr.com>
To: alpine-devel@lists.alpinelinux.org
Subject: Re: [alpine-devel] [PATCH] testing/linux-virt-grsec
In-Reply-To: <20120724114956.2ef69845@ncopa-desktop.nor.wtbts.net>
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Sensitivity: Normal


---- Natanael Copa <ncopa@alpinelinux.org> wrote: 
> On Tue, 24 Jul 2012 0:18:15 +0000
> <deant@hawaii.rr.com> wrote:
>  
> > Attached patch reduces some of the differences between
> > main/linux-grsec/kernelconfig.x86 and
> > testing/linux-virt-grsec/kernelconfig.x86, hopefully without breaking
> > anything for anyone else.
> 
> I am not sure we want them to be similar. The idea of linux-virt-grsec
> is to have a kernel that is as small as possible and is optimized for
> virtual environments.

Ok, that makes sense.  Consider the patch withdrawn; I'll work on
a replacement that fixes the Shorewall logging bug and a few other 
minor bits I found;


> This means that we can assume some things of the running environment.
> That the disk is virtual (so we pick deadline io scheduler) , that most
> likely realtime applications will not be running (so we set config hz
> to 100). We are also fairly sure that there will not be any wireless in
> the virtual environment. (or am i wrong here?)

The place where it would make sense is for a virtualized desktop or 
development environment, but hopefully the xen domu vs. TRANSPARENT_HUGEPAGES
problem will be fixed in a newer release and the main kernel can fill
that role.

-dean takemori


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---