Re: [PATCH] kexec: include sysctl to disable
From: Vivek Goyal
Date: Thu Jan 27 2011 - 13:50:31 EST
On Thu, Jan 27, 2011 at 01:40:02PM -0500, Eric Paris wrote:
> Ping, not hearing any argument is usually a good thing :)
>
So if we allowing locking down module loading, why not allow locking down
kexec kernel loading, hence...
Acked-by: Vivek Goyal <vgoyal@xxxxxxxxxx>
Vivek
> -Eric
>
> On Thu, Jan 20, 2011 at 12:32 AM, WANG Cong <xiyou.wangcong@xxxxxxxxx> wrote:
>
> >> On Wed, 19 Jan 2011 17:26:30 -0500, Eric Paris wrote:
> >>
> >>> much like /proc/sys/kernel/modules_disable is used to disable module
> >>> loading, /proc/sys/kernel/kexec_disable is used to disable kexec code
> >>> loading. It would still be possible to use kexec -l to load a kernel,
> >>> set the tunable to 1 so the kernel waiting to boot couldn't change, and
> >>> then launch the kernel at a later time (through kexec -e or through a
> >>> crash)
>
> > Acked-by: WANG Cong <xiyou.wangcong@xxxxxxxxx>
> --
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.tux.org/lkml/
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/