On Thu, Jan 27, 2011 at 01:40:02PM -0500, Eric Paris wrote: > Ping, not hearing any argument is usually a good thing :) >
So if we allowing locking down module loading, why not allow locking down kexec kernel loading, hence... Acked-by: Vivek Goyal <[email protected]> Vivek > -Eric > > On Thu, Jan 20, 2011 at 12:32 AM, WANG Cong <[email protected]> wrote: > > >> On Wed, 19 Jan 2011 17:26:30 -0500, Eric Paris wrote: > >> > >>> much like /proc/sys/kernel/modules_disable is used to disable module > >>> loading, /proc/sys/kernel/kexec_disable is used to disable kexec code > >>> loading. It would still be possible to use kexec -l to load a kernel, > >>> set the tunable to 1 so the kernel waiting to boot couldn't change, and > >>> then launch the kernel at a later time (through kexec -e or through a > >>> crash) > > > Acked-by: WANG Cong <[email protected]> > -- > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > the body of a message to [email protected] > More majordomo info at http://vger.kernel.org/majordomo-info.html > Please read the FAQ at http://www.tux.org/lkml/ _______________________________________________ kexec mailing list [email protected] http://lists.infradead.org/mailman/listinfo/kexec
