[Tails-dev] Please review'n'merge feature/linux-3.12

Delete this message

Reply to this message
Author: intrigeri
Date:  
To: tails-dev
Subject: [Tails-dev] Please review'n'merge feature/linux-3.12
Hi,

I'm giving up on resolving #6460 (upgrade Linux without breaking
memory wipe on a lot of hardware) in time for 0.22.1, *but* my current
feeling is that it's important to ship a kernel without lots of known
security issues (that affect all Tails users, all the time), even if
it breaks the memory wipe feature on a lot of hardware (that affects
a few Tails users, in rare cases).

Moreover, we've had two reports (comment #14 on the ticket) of
hardware where the memory wipe feature still works, so it may not be
as bad as it initially looked. I intend to include something about it
in the call for testing of the (untested) RC I plan to write.

So, please review'n'merge feature/linux-3.12 into stable for 0.22.1.
Note that we've already merged this into devel.
Any taker? bertagaz?

Sorry for the late notice, given the freeze is in two days, but
I wanted to try until the last minute to find a better solution.

To end with, we'll still want pretty badly to fix the memory wipe
feature at some point. The hope I have is with the results posted on
comment #16: at least on a specific laptop, upgrading to a 64-bit
kernel and/or to 3.13-rc6 fixes it. So, it might be that when
feature/amd64-kernel is merged (0.23, presumably), the problem
vanishes at least on some more hardware.

Cheers,
--
intrigeri
| GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
| OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc