/* * Apply more restrictive page table mapping attributes now that * SVAM() has been called and the firmware has performed all * necessary relocation fixups for the new virtual addresses. */ efi_runtime_update_mappings(); Otherwise /sys/firmware/efi/runtime-map is a copy for kexec-tools to create the virtual efi memmap, but I think the __map_region is called after kexecing into the 2nd kernel, so I feel that at that time the mem attr table should be usable. Anyway thanks for explaining about this. It is indeed something to improve. I have no strong opinion as your code will also work. > > > Have you seen a real bug happened? > > If lowered security posture after kexec counts as a bug, yes. The system > remains stable otherwise. > > Nicolas > Thanks Dave