Re: [PATCH 1/3] mseal sysmap: Add mseal_system_mappings= boot parameter

[Pedro Falcato]

On Tue, Oct 27, 2026 at 07:43:04PM +0800, Chris Down wrote:
> CONFIG_MSEAL_SYSTEM_MAPPINGS seals each process' system mappings when
> they are created. As it is today this can only be toggled at build time,
> so hosts that need sealing and hosts running software which moves or
> unmaps these mappings end up with separate kernels. This is not ideal
> since it adds more complexity of deployment, it would be great to be
> able to have one kernel which can configurably do both.
> 
> So, to improve this, let's add mseal_system_mappings= so that this can
> be chosen at boot.

I'm very curious, do you actually have a usecase for this?

-- 
Pedro