[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [Xen-devel] [PATCH 0/2] x86: allow to enable/disable modify_ldt at run time
This is the second version. It adds a strategy for the sysctls so that we can reject any change to a value that was already negative. This way it's possible to disable modify_ldt temporarily or permanently (eg: lock down a server) as suggested by Kees. Willy Tarreau (2): sysctl: add a new generic strategy to make permanent changes on negative values x86/ldt: allow to disable modify_ldt at runtime Documentation/sysctl/kernel.txt | 16 +++++++++++++ arch/x86/Kconfig | 17 ++++++++++++++ arch/x86/kernel/ldt.c | 15 +++++++++++++ kernel/sysctl.c | 50 +++++++++++++++++++++++++++++++++++++++++ 4 files changed, 98 insertions(+) -- 1.7.12.1 _______________________________________________ Xen-devel mailing list Xen-devel@xxxxxxxxxxxxx http://lists.xen.org/xen-devel
|
Lists.xenproject.org is hosted with RackSpace, monitoring our |