| From | David Howells <> | Subject | Re: [PATCH 02/24] Add the ability to lock down access to the running kernel image | Date | Thu, 06 Apr 2017 11:43:20 +0100 |
| |
James Morris <jmorris@namei.org> wrote:
> > +static __read_mostly bool kernel_locked_down; > > How about marking this __ro_after_init if ALLOW_LOCKDOWN_LIFT is not > configured?
I guess lock_kernel_down() would need to be __init also in that case.
Also, the implementation of lift_kernel_lockdown() should be conditional on CONFIG_ALLOW_LOCKDOWN_LIFT.
David
|