Messages in this thread | | | Date | Thu, 18 Dec 2014 14:36:51 +0100 | From | Petr Mladek <> | Subject | Re: [PATCHv7 2/3] kernel: add support for live patching |
| |
On Tue 2014-12-16 11:58:19, Seth Jennings wrote: > This commit introduces code for the live patching core. It implements > an ftrace-based mechanism and kernel interface for doing live patching > of kernel and kernel module functions. > > It represents the greatest common functionality set between kpatch and > kgraft and can accept patches built using either method. > > This first version does not implement any consistency mechanism that > ensures that old and new code do not run together. In practice, ~90% of > CVEs are safe to apply in this way, since they simply add a conditional > check. However, any function change that can not execute safely with > the old version of the function can _not_ be safely applied in this > version. > > Signed-off-by: Seth Jennings <sjenning@redhat.com> > Signed-off-by: Josh Poimboeuf <jpoimboe@redhat.com>
I like the current state. Thanks a lot for the effort.
Reviewed-by: Petr Mladek <pmladek@suse.cz>
and for my changes:
Signed-off-by: Petr Mladek <pmladek@suse.cz>
Best Regards, Petr
| |