Re: [PATCH v2 0/8] mseal sysmap: Choose system mapping sealing at boot

From: Jeff Xu

Date: Wed Nov 04 2026 - 17:05:19 EST


On Tue, Nov 3, 2026 at 11:17:43PM +0800, Chris Down wrote:
System mapping sealing is currently a build time choice. Hosts which
want it and hosts which need to move or unmap these mappings therefore
need separate kernels, which is not ideal. Let's allow the administrator
to choose at boot time.

Thanks Chris for the updates and for adding the unsealed boot parameter
test coverage! The v2 series looks good to me.

Reviewed-by: Jeff Xu <jeffxu@xxxxxxxxxx>