lkml.org 
[lkml]   [2011]   [Mar]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [Security] [PATCH] power: disable hibernation if module loading is disabled
    On Fri, Mar 04, 2011 at 07:11:24PM +0300, Vasiliy Kulikov wrote:
    > If /proc/sys/kernel/modules_disabled is set to 1, then nobody (even full
    > root) may not read/write arbitrary kernel memory. In spite of it,
    > hibernation allows anyone with an access to either /dev/snapshot or
    > /sys/power/ make the full snapshot of the system. This snapshot may be
    > freely changed and uploaded back.

    This sounds like a very unintentional change to the "don't load any
    modules" option, right? If so, you should really document this
    somewhere, otherwise people are going to get very confused when their
    system suspends suddenly stop working for no obvious reason.

    thanks,

    greg k-h


    \
     
     \ /
      Last update: 2011-03-06 11:19    [W:4.021 / U:12.596 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site