Messages in this thread | | | Date | Wed, 17 Dec 2014 15:09:01 +0100 (CET) | From | Miroslav Benes <> | Subject | Re: [PATCHv7 2/3] kernel: add support for live patching |
| |
On Tue, 16 Dec 2014, Seth Jennings wrote:
> This commit introduces code for the live patching core. It implements > an ftrace-based mechanism and kernel interface for doing live patching > of kernel and kernel module functions. > > It represents the greatest common functionality set between kpatch and > kgraft and can accept patches built using either method. > > This first version does not implement any consistency mechanism that > ensures that old and new code do not run together. In practice, ~90% of > CVEs are safe to apply in this way, since they simply add a conditional > check. However, any function change that can not execute safely with > the old version of the function can _not_ be safely applied in this > version. > > Signed-off-by: Seth Jennings <sjenning@redhat.com> > Signed-off-by: Josh Poimboeuf <jpoimboe@redhat.com>
No problem there for me. So, for my patches you have
Signed-off-by: Miroslav Benes <mbenes@suse.cz>
and for the rest
Reviewed-by: Miroslav Benes <mbenes@suse.cz>
Thanks. Great work! -- Miroslav Benes SUSE Labs
| |