On Fri, Mar 04, 2011 at 07:11:24PM +0300, Vasiliy Kulikov wrote: > If /proc/sys/kernel/modules_disabled is set to 1, then nobody (even full > root) may not read/write arbitrary kernel memory. In spite of it, > hibernation allows anyone with an access to either /dev/snapshot or > /sys/power/ make the full snapshot of the system. This snapshot may be > freely changed and uploaded back. Ah, yes please. I'd like to try to have ways to close all the "intentional" arbitrary memory writing interfaces. Hooking it to modules_disable seems as good as any other toggle. Still waiting to hear anything on this: http://article.gmane.org/gmane.linux.acpi.devel/49471 Acked-by: Kees Cook <kees.cook@xxxxxxxxxxxxx> -- Kees Cook Ubuntu Security Team _______________________________________________ linux-pm mailing list linux-pm@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/linux-pm
