[PATCH v2] kexec: add sysctl to disable kexec

H. Peter Anvin hpa at zytor.com
Tue Dec 10 13:54:00 EST 2013


On 12/10/2013 10:33 AM, Vivek Goyal wrote:
> On Tue, Dec 10, 2013 at 08:32:38AM -0800, H. Peter Anvin wrote:
>> Of course it isn't.
> 
> I am not sure what are you trying to say. This is too brief.
> 
> Thanks
> Vivek
> 

Of course it is not sufficient.  Once you can get arbitrary code into
kernel space (CPL 0) you can do anything, and "disabling jump back" is
just a speed bump.

	-hpa





More information about the kexec mailing list