[PATCH] x86/64: Add CONFIG_DEVMEM=y for targets/x86/64

[Petr Štetiar]

Bjørn Mork <bjorn at mork.no> [2021-02-14 10:33:15]:

Hi,

> And it's already enabled for the ipq807x and rockchip targets, so you can't
> really claim that it's not available in OpenWrt either.

thanks to bringing this to my attention, but I tend to believe, that this is
not intentional.

> I do hope you don't think OpenWrt is somehow more secure than a current
> Debian installation because you arbitrarily remove kernel features like
> this one?

Unless there is a good reason to have this enabled, it should stay disabled in
official builds and "but Debian has it enabled" is not valid argument either.

> The security issues in OpenWrt are caused by almost every process running as
> root.

Thanks to Daniel, this is getting reduced like dnsmasq, logd, ntp, ubus to
name a few.

Cheers,

Petr