On Thu, Jan 27, 2011 at 01:40:02PM -0500, Eric Paris wrote: > Ping, not hearing any argument is usually a good thing :) > So if we allowing locking down module loading, why not allow locking down kexec kernel loading, hence... Acked-by: Vivek Goyal <vgoyal at redhat.com> Vivek > -Eric > > On Thu, Jan 20, 2011 at 12:32 AM, WANG Cong <xiyou.wangcong at gmail.com> wrote: > > >> On Wed, 19 Jan 2011 17:26:30 -0500, Eric Paris wrote: > >> > >>> much like /proc/sys/kernel/modules_disable is used to disable module > >>> loading, /proc/sys/kernel/kexec_disable is used to disable kexec code > >>> loading. ?It would still be possible to use kexec -l to load a kernel, > >>> set the tunable to 1 so the kernel waiting to boot couldn't change, and > >>> then launch the kernel at a later time (through kexec -e or through a > >>> crash) > > > Acked-by: WANG Cong <xiyou.wangcong at gmail.com> > -- > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > the body of a message to majordomo at vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html > Please read the FAQ at http://www.tux.org/lkml/
