Re: [PATCH 2/2] x86: Allow disabling of sys_iopl, sys_ioperm

Jiri Kosina
2011-07-18T14:35:21Z

On Thu, 14 Jul 2011, H. Peter Anvin wrote:

> >> Wouldn't it be more useful for this to be a sysctl? In particular, like
> >> many similar things it probably should be a lockable sysctl (three
> >> states: enabled, disabled, and locked-disabled).
> >>
> >> Making it a compile-time option I'm very skeptical to.
> >
> > Are there existing examples of this already in the tree?
>
> I think so, but I don't know off the top of my head.

/proc/sys/kernel/modules_disabled is a sort-of that kind of thing (it
doesn't have three states, but only two -- enabled and locked-disabled).

--
Jiri Kosina
SUSE Labs