What to Expect from Linux 2.6.12
apt-get writes "Saw this Linuxworld report from the annual Australian Linux conference, Linux.conf.au, in Canberra last week. The article outlines some of the new features we can expect for the 2.6.12 kernel release, including: support for trusted computing, and security enhanced Linux. The kernel developers are also working on improving the 'feel' of the Linux desktop with inotify for file managers and events notification so hardware 'just works'. Unfortunately no release date other than 'sometime soon' is given."
Is the inclusion of trusted computing a good thing here? Many people in the /. crowd didn't seem to like the idea of it's inclusion in Windows...
Was its inclusion in the kernel by choice?
Are they backporting from the 2.7 tree? I know that SE linux has been around for a while, but why the sudden interest by the kernel maintainers?
I think these changes are nice. But what Linux needs is a rethinking of the way device drivers are integrated. Bundling them all with the kernel will just no longer work (did you ever try to configure a kernel these days?). What I am looking for is a way to be able to use the same driver (aka 'module') in different kernels without having to recompile all over again, and the ability to compile a driver without having the complete kernel source installed.
---- join dshield.org Distributed Intrusion Detec
Also, how about growing files with mmap? Currently one can not mmap() beyond the end of the file on Linux...
In Soviet Washington the swamp drains you.
I was just reading the latest Kernel Traffic and it hit me how much of a flux the driver model seems to be in. Constantly.
Microsoft Windows seems to have had a stable driver interface since at least Win2K (probably NT4 too). The weird thing is that eschewing binary compatibility, like Linus likes to do, really ought to make it easier to stabilize a model? I mean, they have all the upsides with none of the downsides.
I really don't care personally -- I don't write drivers -- but isn't it a bit odd that the system is constantly rewritten (or at least majorly tweaked)? New month -- New driver model. New locking mechanism. New everything. What's not new is broken hardware sleep/resume!
Drivers aren't sexy, and it seems a lot of time is spent just spinning in place (no phun intended)
Ross Anderson's Critique
IBM's Rebuttal
Trusted Gentoo
IBM's rebuttal does a decent job of allaying some of the fears - for example, it states that it will not prevent you from running any OS & programs you wish to on your own computer (which, for the record, I believe - witness the Trusted Gentoo project and e.g. this this link). They state that their approach to Trusted Computing is not particularly well-suited to DRM, and on the face of it, I agree - there seems to be little attempt at restricting the user of a computer with the TPM from doing what they want. However, in my opinion, as a base for an utterly crippling DRM regime, distributors simply could not ask for a better setup, as I'll argue a little later.
So to re-cap, it seems that if you are running Trusted hardware, there are no restrictions on what you can do on your computer in isolation; you can install Linux, run any number of Open Source apps, etc. But the keyword here is in isolation, and it is here that the dangers of Trusted Computing are revealed. For you see, Trusted Computing enables the usage of remote attestation wherein a server may request a hash of all software currently running on your computer. This hash is, for all intents and purposes, unforgeable, and if you disable your TPM (as IBM stress that you can, and again for the record, I see no reason to disbelieve them), no hash will be sent. The server may then assess this hash of software (or note that no hash has been provided, in which case it may well treat your computer as Untrusted) and decide, based on what software you are running, to simply not serve you with whatever material you requested - for example, it may decide that it will not deliver MP3's to your computer unless it knows for a fact that the receiving application is one that is known to encrypt the content as soon as it is received (so that e.g. it simply cannot be viewed while not running in Trusted mode) and which will take every step to ensure that once received, the unencrypted content never leaves your machine (e.g. by being written to CD, e-mailed , etc.). As you can imagine, the above scenario is not at all far-fetched as the **AA/ other media distributors are positively *creaming* themselves at the thought of stamping out casual file-sharing or even making backups for your own use in some of your other devices.
So we are left with the situation where someone who does not use Trusted hardware (and is thus unable to respond to attestation requests) or those who do run Trusted hardware but whose software fingerprint is not deemed acceptable by the server will simply not be granted access to certain material, rendering such people at a big disadvantage. And it's no good buying hardware free from Trust chips from China or such places on the "black market"; this offers no advantage at all as Trusted hardware, as mentioned, does not stop you using your computer the way you want in isolation; the problem only occurs when you try to interact with other computers.
So far, this sounds unpleasant but not too bad (although I would urge you to read Anderson's linked essay for some more imaginative and serious abuses), but if we allow ourselves to follow the slippery-slope, we end up at the state where ISPs will not allow your computer to access the internet at all (for surfing, e-mailing, anything) unless you are running Trusted hardware and software. Obviously, the social, political and legal barriers to this occurence are non-trivial, but we've all seen ridiculous Acts qu
Apparently, accourding to some posts on the Linux Audio User list the latency in native 2.6.12 is as good as the patched 2.4 for audio use.
This is great news for all of us using Linux for audio. It's also a pretty mean feat, as the 2.4 low latency patches were a little bit brute force compared to the 'correct' method in 2.6 of fixing all the problem spin lock areas in the kernel, a much harder task.
Now all we need is to get the RT LSM module into the main kernel. (It allows non root uses real time scheduling without messing about, it's not vital for perfomance but nice for usability.)
I have not tried 2.6.12 myself yet, but have got great results with unpatched 2.6.11 kernels.
What I meant by the above post is...I appreciate the rapid development, but the kernel has of late become a moving target. Doesn't anyone else out there wish the releases would slow down? I would like infrequent releases of a stable kernel rather than rapid bugfixes.
Xen would be able to run Windows perfectly well in it's current state, and it did at one point, but the problem is legal and licensing restrictions.
Either some of the software that is used, or some of the drivers that are used, are under a restrictive license (probably from MS) so that while it's technically possible, it is legally impossible.
Isn't closed source a bitch?
With the newer CPUS they have built in abstractions into the hardware that would possibly allow things like Xen to 'operate closer to bare metal' and thus avoid whatever software has the legal restrictions.
What is interesting is that "Trusted" used to be a label applied to systems like Trusted Solaris that implemented mandatory access controls (similar to what SELinux does for Linux). Which version of Trusted computing are they talking about? Mandatory access controls or the DRM nonsense?
I do not agree with Trusted Computing. Recently I was offered to buy a brand new IBM sub-notebook at a very low price and I refused because it supported Trusted Computing. If 2.6.12 supports Trusted Computing I will never upgrade to it. I boycott it. There are more evil uses of Trusted Computing than good uses, so I see no reason why I should empower the corporations to dictate what software I should run on my computer.
How are any of these feature `revolutionary' or any sort of significant milestone? Maybe it is in the Linux world..
SELinux, please. Solaris has had..
Reiser 4!? C'mon! Solaris 10 will have..
Xen you say? Eh, not to burst your bubbles but Solaris 10 now features...
Isn't that the exact point? This is noteworthy because these are features of LINUX, which LINUX didn't have before. By your arguements there would be no reason to ever start a new OS project. "Oh shit, we're adding harddisk support. That's been done, so... we can stop here."
I'm glad you're a fan of Solaris. So am I to an extent. But if we could get the same capabilities under the development and openness model of Linux, then how cool would that be? Sun likes to try and talk a big game, but they're never going to open up Solaris as much as Linux is.
I'm against picketing, but I don't know how to show it.
I tried plugging a laptop hard drive to a USB adapter and then into a Windows desktop so I could recover the drive (the laptop was dead). It recognized it as a USB mass storage device, but did not give it a drive letter. Took a look in the Disk Management control panel. It saw the drive, and its partitions, and acknowledged that there was no drive letter. I right clicked the partition and the option to assign it a drive letter was greyed out. So I tried the diskpart command line tool. It said that the drive was active, and it saw the NTFS windows partition, but that the drive was hidden and had no volumes. There was no command to mount the partition.
/etc/apt/sources.list
I tried the drive on 3 computers, with XP home, XP professional, and 2000 professional. Same results on each, except that the 2000 computer spontaneously rebooted and afterwards could no longer mount any usb drives.
So I plugged it into an ancient computer running Ubuntu Hoary. The drive was immediately detected and mounted. An icon was placed on the desktop. A nautilus window was popped up to browse the drive's contents. I was able to backup the entire drive to a server without error and without the use of a command line. I just dragged & dropped.
I haven't encountered your problem yet. You could try Ubuntu Hoary to see if that fixes it. To upgrade from the command line:
sudo gedit (or whatever text editor you prefer)
replace each "warty" with "hoary" and save
sudo apt-get update
sudo apt-get dist-upgrade
I'm running a circa-1999 machine, and have been running 2.6 since 2.6.0, and am currently running 2.6.11. I use it everyday, so it isn't just sitting idle. Here is my current uptime :
At the risk of starting a religious war, are you running any binary modules ? They can cause some stability problems.
I avoid binary modules, or rather, make sure that the hardware I buy is supported by official kernel device drivers. Back in 1993, when I first started to use Linux, you didn't have a choice - it was open source device drivers or the hardware just wouldn't work.
Here are some brief specs on my machine.
OpenGL isn't fully working on my Radeon 9200 yet, following the dri-development mailing list, there seems to be some bugs that are causing it to lock up. I've had glxgears run for about 4 minutes, then X locks up. If I desperately need it, I'll put my Matrox G550 back in.
In my experience, 2.6 has been as stable as 2.4.
The Internet's nature is peer to peer - 20050301_cs_profs.pdf
Should you be curious, I've posted the slides to my talk on LWN.net.
Jonathan Corbet, LWN.net
One feature that isn't talked about much, but is very popular amongst gamers is the configurable USB mouse polling rate. For years it has been available as a kernel patch, but now it has finally been included in the kernel. This means no more recompiling your kernel just to increase your mouse polling rate from 125hz to 500hz. It can now be set from your boot loader or from the command prompt.
Why is this so great? Well, the typical polling rate of 125hz for USB mice is noticably less smooth than a polling rate of 500hz, whether you are using your mouse in games or a desktop app. For this reason many people preferred to use PS2 mice, as they could be polled at up to 200hz. Now with this new feature, PS2 can be retired. Get yourself a high resolution USB optical mouse and set the polling rate to 500hz.
You can feel the difference.
Windows will only assign a USB drive the next drive letter after the last physical device. For example: if your cd-rom is D: then the USB drive will try to mount at E:, however, if you have E: mapped to a network drive, the USB drive will not be mounted.
The fact that you *have* to "unmount" is the bug, you know.
I know, they may have trashed their data because they did not unmount. However it is silly to "punish" them by making it impossible to stick the disk back in to see if it is trashed.
Here is what I consider the ideal solution, far better than Windows or OS/X. Lets see if somebody can actually do this right:
When the drive is pulled, the system checks to see if all I/O had been flushed to it. If so it unmouts. The desktop environment responds instantly by removing any display of that drive or it's contents in file browsers.
If I/O has not been flushed the disk indicator remains in the desktop display, with a big red mark indicating that it had been pulled. Usually sticking it back in and pulling it after a second will flush the rest of the data and unmount it correctly. The user can also ignore it and stick new USB drives in (getting new icons) or do something on the menu to make it forget about the drive.
Attempting to shut down or log off with any red marked disks will ask the user to stick them back in so the data can be flushed. The user can hit cancel if they don't want to.
This flushing of a reinserted device must check carefully that it is the same device and it has not been written to by another machine while it was pulled.
I've been using Reiser4 on a spare partition for a while now, and my only suspected issue (inexplicible HDD activity) may not have been related. When I compiled it in, Hans Reiser stated that there were 0 open bugs. My understanding is that Reiser4 is so bizarrely un-posix that Linus isn't comfortable with it. The HR/LT discussion regarding R4s inclusion was posted here a while back.
No doubt I'm opening myself up to a Troll/Flamebait mod, but...
FreeBSD's Firewire support is much better than Linux's. FreeBSD had firewire support before Linux, and it was considered stable and released in the default kernel before Linux even had it's unstable Firewire drivers available as an option, IIRC.
Having good firewire support leads to other interesting developments too, like the ability to debug a crashed system over firewire.
Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant