Messages in this thread | | | Date | Sun, 1 Sep 2013 10:52:45 +0200 | Subject | Re: [PATCH 08/10] kexec: Disable at runtime if the kernel enforces module loading restrictions | From | Geert Uytterhoeven <> |
| |
On Mon, Aug 19, 2013 at 6:10 PM, Matthew Garrett <matthew.garrett@nebula.com> wrote: > kexec permits the loading and execution of arbitrary code in ring 0, which > is something that module signing enforcement is meant to prevent. It makes > sense to disable kexec in this situation.
Any plans for signed kexec code?
Gr{oetje,eeting}s,
Geert
-- Geert Uytterhoeven -- There's lots of Linux beyond ia32 -- geert@linux-m68k.org
In personal conversations with technical people, I call myself a hacker. But when I'm talking to journalists I just say "programmer" or something like that. -- Linus Torvalds
| |