Re: [PATCH 11/24] uswsusp: Disable when the kernel is locked down

[Rafael J. Wysocki]

On Wed, Apr 5, 2017 at 10:16 PM, David Howells <dhowells@xxxxxxxxxx> wrote:
> From: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
>
> uswsusp allows a user process to dump and then restore kernel state, which
> makes it possible to modify the running kernel.  Disable this if the kernel
> is locked down.
>
> Signed-off-by: Matthew Garrett <mjg59@xxxxxxxxxxxxx>
> Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
> cc: linux-pm@xxxxxxxxxxxxxxx

You probably want to disable hibernation altogether in this case.

Thanks,
Rafael