[Debian] Re: What version of debian kernel to use?

[Kir Kolyshkin]

Vasily Tarasov wrote:
> Yes, in 007 kernel there was no !CONFIG_SECURITY dependency.
>>>     
>>>       
>> I understand. Is there any specific reason why this conflict was
>> introduced. I think it can be harder to convince the release
>> managers to allow this version, unless I have a good explanation
>> for it. :)
>>   
>>     
> The explanation is very easy :) : At the moment OpenVZ confidently
> support only classical security model, other security models are not
> supported. So CONFIG_VE depends on !CONFIG_SECURITY.
>   
Let's say it this way -- OpenVZ introduces a security model of its own, 
and we don't know how this model will interact with the one imposed by 
CONFIG_SECURITY, what the consequences are -- thus we depend on 
!CONFIG_SECURITY.