On Wed, 2015-08-26 at 09:38 +0200, Andreas Barth wrote: > * Florian Weimer (fw@deneb.enyo.de) [150823 17:02]: > > * Andreas Barth: > > > > > Specific issues: > > > - for i386, there is still sold new hardware with 32bit-only. Are > > > there open issues for i386 (apart from the 32bit-generic ones)? > > > > FWIW, for x32, the security team would prefer if support in the Debian > > amd64 kernel would remain guarded by a boot-time option. > > You mean that on an kernel from an amd64-installation, 32bit binaries > could only be used with an appropriate boot option? This however isn't > any issue with the i386-architecture, but only on using this arch in > an chroot in an amd64-installation. Perhaps we could standardise a directory of config files containing kernel parameters that boot loaders should append by default? There are plenty of packages that this would be useful for. For x32 the installer (or maybe a package such as base-files) could add the 'syscall.x32=y'. Ben. -- Ben Hutchings Always try to do things in chronological order; it's less confusing that way.
Attachment:
signature.asc
Description: This is a digitally signed message part