On Fri 2011-03-04 19:11:24, Vasiliy Kulikov wrote: > If /proc/sys/kernel/modules_disabled is set to 1, then nobody (even full > root) may not read/write arbitrary kernel memory. In spite of it, > hibernation allows anyone with an access to either /dev/snapshot or > /sys/power/ make the full snapshot of the system. This snapshot may be > freely changed and uploaded back. module loading has nothing to do with hibernation, and hibernation already checks for CAP_ADMIN or something similary strong. I don't see why this new check is needed. In fact, you are probably breaking someone's setup right now. > + if (modules_disabled) > + return -EPERM; > + > error = platform_begin(platform_mode); Hmm. How is this supposed to work with CONFIG_MODULES off? NAK. Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html _______________________________________________ linux-pm mailing list linux-pm@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/linux-pm