Re: [kernel-hardening] [PATCH 0/2] introduce post-init read-only memory

H. Peter Anvin
2015-11-30T21:43:53Z

On 11/30/15 13:33, Kees Cook wrote:
>>
>> I think what should do is have a debug option which can be set to "rw",
>> "log" or "oops"; the latter should probably be the default.
>
> Can someone write that patch, and then I will include it in the
> series? I haven't touched fault handler code, and it would be faster
> if someone more familiar with that area did it. :)
>

The "log" option (the only hard one) can be added as a later
enhancement, and probably should be. It shouldn't block the series.

-hpa