On Thu, 2 Oct 2008 22:29:38 -0700
Kees Cook <kees.cook@canonical.com> wrote:
while I really like the idea of passing random bytes to glibc...
... why make it complex and configurable, rather than just always
passing, say 8 or 16 bytes.
16 bytes (say 4 vectors) is easier than "variable number of" both on the
kernel and on the glibc side, and nobody other than maybe Ulrich
and Jakub wouldn't know what to answer to the KConfig question anyway.
Or lets put it differently: why would I answer anything other than the
default? Your KConfig help text sure doesn't explain my what I give up
by answering 0 or 256.... If nobody can answer anything sensible other
than the default, it shouldn't be a config option imo.
--