[PATCH] kexec: include sysctl to disable

Vivek Goyal vgoyal at redhat.com
Thu Jan 27 13:50:21 EST 2011


On Thu, Jan 27, 2011 at 01:40:02PM -0500, Eric Paris wrote:
> Ping, not hearing any argument is usually a good thing   :)
> 

So if we allowing locking down module loading, why not allow locking down
kexec kernel loading, hence...

Acked-by: Vivek Goyal <vgoyal at redhat.com>

Vivek

> -Eric
> 
> On Thu, Jan 20, 2011 at 12:32 AM, WANG Cong <xiyou.wangcong at gmail.com> wrote:
> 
> >> On Wed, 19 Jan 2011 17:26:30 -0500, Eric Paris wrote:
> >>
> >>> much like /proc/sys/kernel/modules_disable is used to disable module
> >>> loading, /proc/sys/kernel/kexec_disable is used to disable kexec code
> >>> loading.  It would still be possible to use kexec -l to load a kernel,
> >>> set the tunable to 1 so the kernel waiting to boot couldn't change, and
> >>> then launch the kernel at a later time (through kexec -e or through a
> >>> crash)
> 
> > Acked-by: WANG Cong <xiyou.wangcong at gmail.com>
> --
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo at vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/



More information about the kexec mailing list