noexec on /dev/shm

[Lennart Poettering]

On Thu, 16.12.10 22:02, Miloslav Trmač (mitr at volny.cz) wrote:

> Casey Dahlin píše v Čt 16. 12. 2010 v 15:50 -0500:
> > On Thu, Dec 16, 2010 at 08:16:53PM +0100, Miloslav Trmač wrote:
> > > Especially minor changes that don't bring any measurable benefit
> > > (perhaps making the system "cleaner" or making programmer's life more
> > > convenient) but require time from each user to adapt are better
> > > abandoned than implemented.
> > > 	Mirek
> > 
> > Measurable != significant. Great programmers and architects have an instinct
> > for something called "defect avoidance." You can't measure it, since the unit
> > would be "number of bugs/bug-related outages and problems which never
> > happened." Depending on your instincts on what that value might be, "cleaner"
> > could be the single most important thing to improve in the entire distro.
> 
> The trouble is that we can't all agree on the immeasurable benefits (but
> we can probably agree on the existence of the measurable costs), which
> is why the monster threads about systemd arrive so regularly.

Do they?

I guess as long as they are only about whether to set noexec on /dev/shm
by default then we did quite a few things right, didn't we?

Lennart

-- 
Lennart Poettering - Red Hat, Inc.