public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
From: Arjan van de Ven <arjan@infradead.org>
To: Rusty Russell <rusty@rustcorp.com.au>
Cc: Ingo Molnar <mingo@elte.hu>,
	Siarhei Liakh <sliakh.lkml@gmail.com>,
	linux-kernel@vger.kernel.org,
	linux-security-module@vger.kernel.org,
	James Morris <jmorris@namei.org>,
	Andrew Morton <akpm@linux-foundation.org>, Andi Kleen <ak@muc.de>,
	Thomas Gleixner <tglx@linutronix.de>,
	"H. Peter Anvin" <hpa@zytor.com>,
	linux-cris-kernel@axis.com
Subject: Re: [PATCH v5] RO/NX protection for loadable kernel modules
Date: Sun, 12 Jul 2009 20:11:21 -0700	[thread overview]
Message-ID: <20090712201121.38990aa5@infradead.org> (raw)
In-Reply-To: <200907130851.56161.rusty@rustcorp.com.au>

On Mon, 13 Jul 2009 08:51:55 +0930
Rusty Russell <rusty@rustcorp.com.au> wrote:

> On Mon, 13 Jul 2009 01:02:27 am Arjan van de Ven wrote:
> > Rusty Russell <rusty@rustcorp.com.au> wrote:
> > > Yes, maybe that's better than kmalloc.  On my laptop I have 105
> > > modules loaded, with 3778464 total length: I'm wasting 206944
> > > bytes on unused tails of pages.  But that's only 0.06% of my
> > > memory.
> >
> > 105 is also a sign that you picked a somewhat suboptimal config...
> > that's of course your choice but it's a choice that has a small
> > price, if you don't want to pay that price, changing the config to
> > not be entirely insane is a good answer as well ;-)
> 
> To be clear: I run distro kernels on my laptop (Ubuntu in this
> case).  I think this is what we should be optimizing for, or we
> should offer the distros something better than modules.

working for a distro myself... yes I like modules for drivers.
But I also know the thinking about modules in distros is changing a bit.
It used to be "everything must be a module", but that thinking is
changing to be a bit more balanced. Things that would be loaded always
are being built in now more and more; Greg is doing that for SuSE, Dave
has been doing that for Fedora, I've been doing it for Moblin and I
think Ubuntu is also going in that direction as well. 

Modules have some overhead in various places (both load and runtime)
that justifies applying ones brain when making choices for distribution
kernels.

--
Arjan van de Ven 	Intel Open Source Technology Centre
For development, discussion and tips for power savings, 
visit http://www.lesswatts.org

  reply	other threads:[~2009-07-13  3:09 UTC|newest]

Thread overview: 20+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-07-08 23:10 [PATCH v5] RO/NX protection for loadable kernel modules Siarhei Liakh
     [not found] ` <20090710112403.GC3760@elte.hu>
     [not found]   ` <200907111537.03191.rusty@rustcorp.com.au>
2009-07-11  7:30     ` Ingo Molnar
2009-07-11 11:22       ` Rusty Russell
2009-07-11  8:51     ` Rusty Russell
2009-07-11 15:49       ` Arjan van de Ven
2009-07-12  4:40         ` Rusty Russell
2009-07-12  4:45           ` H. Peter Anvin
2009-07-12  7:45           ` Arjan van de Ven
2009-07-12  9:25             ` Andi Kleen
2009-07-12  9:58             ` Rusty Russell
2009-07-12 15:32               ` Arjan van de Ven
2009-07-12 17:33                 ` Greg KH
2009-07-12 21:58                   ` Arjan van de Ven
2009-07-12 22:14                     ` Greg KH
2009-07-13  9:02                     ` Andi Kleen
2009-07-12 23:21                 ` Rusty Russell
2009-07-13  3:11                   ` Arjan van de Ven [this message]
2009-07-12  9:24           ` Andi Kleen
2009-07-13 16:59             ` Roland Dreier
2009-07-13 10:59           ` Jesper Nilsson

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20090712201121.38990aa5@infradead.org \
    --to=arjan@infradead.org \
    --cc=ak@muc.de \
    --cc=akpm@linux-foundation.org \
    --cc=hpa@zytor.com \
    --cc=jmorris@namei.org \
    --cc=linux-cris-kernel@axis.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=mingo@elte.hu \
    --cc=rusty@rustcorp.com.au \
    --cc=sliakh.lkml@gmail.com \
    --cc=tglx@linutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox