lkml.org 
[lkml]   [2014]   [Dec]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCHv7 2/3] kernel: add support for live patching
On Tue, 16 Dec 2014, Seth Jennings wrote:

> This commit introduces code for the live patching core. It implements
> an ftrace-based mechanism and kernel interface for doing live patching
> of kernel and kernel module functions.
>
> It represents the greatest common functionality set between kpatch and
> kgraft and can accept patches built using either method.
>
> This first version does not implement any consistency mechanism that
> ensures that old and new code do not run together. In practice, ~90% of
> CVEs are safe to apply in this way, since they simply add a conditional
> check. However, any function change that can not execute safely with
> the old version of the function can _not_ be safely applied in this
> version.
>
> Signed-off-by: Seth Jennings <sjenning@redhat.com>
> Signed-off-by: Josh Poimboeuf <jpoimboe@redhat.com>

I have finally finished reviewing this as well.

Reviewed-by: Jiri Kosina <jkosina@suse.cz>

and

Signed-off-by: Jiri Kosina <jkosina@suse.cz>

for the changes I contributed.

I'll wait a bit more to eventually gather more acks / review comments, and
will then push it to git.kernel.org repository (with SUSE copyright added
to livepatch.c) and have included in linux-next, as discussed before.

Thanks!

--
Jiri Kosina
SUSE Labs


\
 
 \ /
  Last update: 2014-12-19 09:21    [W:0.193 / U:0.256 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site