Re: [PATCH 02/24] Add the ability to lock down access to the running kernel image

From: James Morris
Date: Thu Apr 06 2017 - 05:11:04 EST


On Wed, 5 Apr 2017, David Howells wrote:

> +#include <linux/security.h>
> +#include <linux/export.h>
> +
> +static __read_mostly bool kernel_locked_down;

How about marking this __ro_after_init if ALLOW_LOCKDOWN_LIFT is not
configured?


--
James Morris
<jmorris@xxxxxxxxx>