[PATCH 01/12] Add support for indicating that the booted kernel is externally trusted

2015-03-13 Thread Matthew Garrett
Provide a boolean runtime configuration option for restricting userspace's ability to modify the running kernel. This can be used when some external validation of the kernel's state has been performed. Signed-off-by: Matthew Garrett --- Documentation/kernel-parameters.txt | 6 ++ Documen

Re: [PATCH 01/12] Add support for indicating that the booted kernel is externally trusted

2014-03-31 Thread Pavel Machek
On Wed 2014-02-26 15:11:02, Matthew Garrett wrote: > Provide a boolean runtime configuration option for restricting userspace's > ability to modify the running kernel. This can be used when some external > validation of the kernel's state has been performed. I still don't like the idea, but... >

Re: [PATCH 01/12] Add support for indicating that the booted kernel is externally trusted

2014-02-27 Thread Kees Cook
On Wed, Feb 26, 2014 at 12:11 PM, Matthew Garrett wrote: > Provide a boolean runtime configuration option for restricting userspace's > ability to modify the running kernel. This can be used when some external > validation of the kernel's state has been performed. > > Signed-off-by: Matthew Garret

[PATCH 01/12] Add support for indicating that the booted kernel is externally trusted

2014-02-26 Thread Matthew Garrett
Provide a boolean runtime configuration option for restricting userspace's ability to modify the running kernel. This can be used when some external validation of the kernel's state has been performed. Signed-off-by: Matthew Garrett --- Documentation/kernel-parameters.txt | 6 ++ Documen