On Thu, 19 Oct 2017, David Howells wrote: > From: Matthew Garrett <mj...@srcf.ucam.org> > > uswsusp allows a user process to dump and then restore kernel state, which > makes it possible to modify the running kernel. Disable this if the kernel > is locked down. > > Signed-off-by: Matthew Garrett <mj...@srcf.ucam.org> > Signed-off-by: David Howells <dhowe...@redhat.com>
Reviewed-by: James Morris <james.l.mor...@oracle.com> -- James Morris <james.l.mor...@oracle.com>
