Read the Jesus parts again. Would Jesus like that?

  • 17 Posts
  • 862 Comments
Joined 3 years ago
cake
Cake day: August 12th, 2023

help-circle









  • Clearly you know of lot about this. Here are some comments for the next human.

    Deny all modules seems more possible than a whitelist approach. To deny all, the command is likely “sysctl kernel.modules_disabled=1”.

    Whitelisting is harder. One could store a list of all loaded modules on a working system. Store a list of all kernel modules currently installed on the system. Compare the lists and remove from the “all” list the “running” list (grep will do this) and write it to the blacklist file.

    The problem with the Whitelisting approach is that it needs to run after every kernel module install (which is doable).

    If the above is the case, then someone must have automated this already, but I cannot find it quickly. (I checked Debian’s package repository.)








  • exact same thing every time

    I imaging it is this, combined with memory saving. So each scoop of ice cream is the same scoop (3 scoops in that bowl are the same three scoops.) Maybe even more extreme with the “scoop” being a “replicate this 1 mL of ice cream and apply a scoop shape, where that shape is ‘round’”.

    My evidence is that some recipes are simply not in the replicators storage of galaxy class ships. This indicates that it takes both storage and effort to get a recipe into the machine.