Linux

48330 readers

597 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago

MODERATORS

[email protected]

218

tension on kernel mailing lists continues to grow as a Linux Foundation board member finally replies with a "summary of the legal advice the kernel is operating under" re: enforcing US sanctions (lore.kernel.org)

submitted 4 weeks ago* (last edited 4 weeks ago) by [email protected] to c/[email protected]

104 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 32 points 4 weeks ago* (last edited 4 weeks ago) (2 children)

Damn there are a surprising number of maintainers that are comrades and not taking this lying down from the western supremacist cohort.

Linus opened up a massive can of worms and turned this into a geopolitical conflict by acting like a baby.

This comment by Hantong Chen is great:

Hi James,

Here's what Linus has said, and it's more than just "sanction."

Moreover, we have to remove any maintainers who come from the following countries or regions, as they are listed in Countries of Particular Concern and are subject to impending sanctions:

Burma, People’s Republic of China, Cuba, Eritrea, Iran, the Democratic People’s Republic of Korea, Nicaragua, Pakistan, Russia, Saudi Arabia, Tajikistan, and Turkmenistan.

Algeria, Azerbaijan, the Central African Republic, Comoros, and Vietnam.

For People’s Republic of China, there are about 500 entities that are on the U.S. OFAC SDN / non-SDN lists, especially HUAWEI, which is one of the most active employers from versions 5.16 through 6.1, according to statistics. This is unacceptable, and we must take immediate action to address it, with the same reason.

[–] [email protected] 3 points 4 weeks ago (1 children)

Wasn't Huawei trying to put a Backdoor into linux?

If yes, I see why they finally want to restrict maintainers to countries they can trust

[–] [email protected] 4 points 4 weeks ago (2 children)

Wasn’t Huawei trying to put a Backdoor into linux?

as far as i know, that has not happened.

what makes you think it did?

[–] [email protected] 1 points 3 weeks ago (1 children)

Articles back in the days.

I found a random one now. Maybe I got just clickbaited with titles back then. I dunno

https://securityboulevard.com/2020/12/was-this-huaweis-failed-attempt-at-a-linux-backdoor/

[–] [email protected] 2 points 3 weeks ago (1 children)

Funny that blog calls it a "failed attempt at a backdoor" while neglecting to mention that the grsec post (which it does link to and acknowledges is the source of the story) had been updated months prior to explicitly refute that characterization:

5/22/2020 Update: This kind of update should not have been necessary, but due to irresponsible journalists and the nature of social media, it is important to make some things perfectly clear:

Nowhere did we claim this was anything more than a trivially exploitable vulnerability. It is not a backdoor or an attempted backdoor, the term does not appear elsewhere in this blog at all; any suggestion of the sort was fabricated by irresponsible journalists who did not contact us and do not speak for us.

There is no chance this code would have passed review and be merged. No one can push or force code upstream.

This code is not characteristic of the quality of other code contributed upstream by Huawei. Contrary to baseless assertions from some journalists, this is not Huawei's first attempt at contributing to the kernel, in fact they've been a frequent contributor for some time.

[–] [email protected] 2 points 3 weeks ago

Damn, I have been thinking bad about them for too long for shitty journalism

[–] [email protected] 2 points 4 weeks ago (1 children)

Meh, if they really leave this will prompt the US government or corps to finally start paying these developers. This flare up is a blessing in disguise.

[–] [email protected] -5 points 4 weeks ago (2 children)

Wait until you find out how much of Linux the NSA has built.

[–] [email protected] 9 points 4 weeks ago (1 children)

Next to none. You're just spreading FUD.

[–] [email protected] 3 points 4 weeks ago (1 children)

selinux is one example.

[–] [email protected] 1 points 3 weeks ago

They haven't been involved with that for years and it's open source so it's as likely to have a backdoor as any other part of the code.

[–] [email protected] 3 points 3 weeks ago* (last edited 3 weeks ago)

The NSA also created TOR