Re: [PATCH v2] kexec: add sysctl to disable kexec

From: H. Peter Anvin
Date: Tue Dec 10 2013 - 13:55:18 EST


On 12/10/2013 10:33 AM, Vivek Goyal wrote:
> On Tue, Dec 10, 2013 at 08:32:38AM -0800, H. Peter Anvin wrote:
>> Of course it isn't.
>
> I am not sure what are you trying to say. This is too brief.
>
> Thanks
> Vivek
>

Of course it is not sufficient. Once you can get arbitrary code into
kernel space (CPL 0) you can do anything, and "disabling jump back" is
just a speed bump.

-hpa


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/