Messages in this thread | | | Date | Wed, 8 Nov 2017 22:01:48 +0530 | From | Ananth N Mavinakayanahalli <> | Subject | Re: [RFC][PATCH] Lock down kprobes |
| |
On Wed, Nov 08, 2017 at 04:21:33PM +0000, David Howells wrote: > Hi, > > I need to lock down kprobes under secure boot conditions as part of the patch > series that can be found here: > > https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git/log/?h=efi-lock-down > > Can you tell me that if the attached patch is sufficient to the cause?
This will not prevent the raw kprobe events from working. If your intention is to prevent *any* kprobe registration, the best place to do that is in register_kprobe() in kernel/probes.c
Ananth
| |