Re: [PATCH] power: disable hibernation if module loading isdisabled
From: david
Date: Sun Mar 06 2011 - 14:38:04 EST
On Fri, 4 Mar 2011, Vasiliy Kulikov wrote:
If /proc/sys/kernel/modules_disabled is set to 1, then nobody (even full
root) may not read/write arbitrary kernel memory. In spite of it,
hibernation allows anyone with an access to either /dev/snapshot or
/sys/power/ make the full snapshot of the system. This snapshot may be
freely changed and uploaded back.
given that the user can boot a different OS entirely and modify the stored
image, I don't see how this can work, even conceptually.
and tieing anything modules related to hibernation is just wrong, you are
mixing completely different concepts (even if the implementation happens
to be similar)
David Lang
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/