Exciting, I saw that too. Not sure I'm going to get to do a reboot on
master before Kernel summit (and it's OS upgrade) but I'm re-compiling
the kernel with IMA disabled.
Master's live backup machine was chewing nearly 4G of memory, and
if/when I flip some of the big frontend machines over this is going to
be a completely unacceptable waste of memory.
For the record I'm really not happy or keen on having to maintain a
custom kernel just to get this disabled, but if it's going to save me 4G
on a single quiet machine I can only assumes it's going to save me
several 10s of gigs on some of the bigger machines.
Ouch, thanks for giving us a heads up on it, definately not something I
expected to quietly creep in and bite me. I should have a solution, if
one I'm not happy with, in the short term. Hopefully Fedora/upstream
will have a better solution soon.
For the record I liked the explicit opt-in that was mentioned vs. and
automatic opt-in without disable we have now.
- John 'Warthog9' Hawley
--