From mboxrd@z Thu Jan  1 00:00:00 1970
From: Peter =?utf-8?q?M=C3=BCller?= <peter.mueller@link38.eu>
To: development@lists.ipfire.org
Subject: Re: [PATCH] disable runtime kernel replacement via kexec
Date: Sun, 19 Aug 2018 20:14:52 +0200
Message-ID: <3e6df0d2-7cc8-240c-4d8d-cb154b9fccaa@link38.eu>
In-Reply-To: <57d61c63-b0a5-0a3b-c1d5-74e7cec2e583@link38.eu>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7812263131202670325=="
List-Id: <development.lists.ipfire.org>

--===============7812263131202670325==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

Hello,

please ignore this patch as it contains some errors leading
to key lookup failures in sysctl.

Sorry for the inconvenience.

Thanks, and best regards,
Peter Müller

> Signed-off-by: Peter Müller <peter.mueller(a)link38.eu>
> ---
>  config/etc/sysctl.conf | 4 ++++
>  1 file changed, 4 insertions(+)
> 
> diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf
> index 011c4287e..5735dd42e 100644
> --- a/config/etc/sysctl.conf
> +++ b/config/etc/sysctl.conf
> @@ -48,3 +48,7 @@ kernel.kptr_restrict = 1
>  
>  # Avoid kernel memory address exposures via dmesg.
>  kernel.dmesg_restrict = 1
> +
> +# Turn off kexec, even if it's built in (dangerous because
> +# it can replace the running kernel).
> +kernel.kexec_load_disabled = 1
> 

-- 
Microsoft DNS service terminates abnormally when it recieves a response
to a DNS query that was never made.  Fix Information: Run your DNS
service on a different platform.
		-- bugtraq


--===============7812263131202670325==
Content-Type: application/pgp-signature
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="signature.asc"
MIME-Version: 1.0

LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KCmlRSXpCQUVCQ2dBZEZpRUV2UDRTaUdoRVlE
SnlyUkxrMlVqeUQzMTduMmdGQWx0NXM1d0FDZ2tRMlVqeUQzMTcKbjJqS2x4QUF0Q2ZCWkhRZStJ
UURyYjBXN2RvODhpWXZUT2t4NUtIMmZhd2tpRUdPejh6cThKbDVPNTJQZlpmSgptT2VOdTZxTkZq
SVpUbDA1V3JIVFhQTmpDYjFFL2tVMW5FMjFOdHVCOFl2bk5ieVZYdlVJM0FmdnRML3FXT0NiCkVp
N2lJaWE1Um94bHF4WUZLUWladFVNQkNhSWI5MHJGMjBoZTdpdlAzdHBra3JiL0c3cnpLUVR6Yi9L
eXAzak8KVFl2eDF1bk5ZRWJhNWpMVXNyMXdrZEFYS2g2Z0lEN0l6SkhCVTUyZU9CQWhCWjRyTjZk
RDl1MkluNXhMZVNYVQo2R3JkN29PRC9wSk9WaWtuNGN5bXRveTVoa1dMam9VSXR2bFdySXJEd25S
aFlQa0pNaElCc2xtTHo1MlVPQTlICnhZaVZuZFRFRGR5eVZZUFFmbW9hbE9yWWwyVkZOMU1ybEZo
RnE0a3JKR2s0Zk1VYzYrZjFDQmI4RDRnaExHcnIKVWpKa2FKa1JyN2ZYTExPMldKMW0rMHlLQ1pK
Q3VMVjQ3S25iSFBxVUtTZEh4VXUyU2orNnNhYWV6bUdDUFFYSgo4ZzZGQkszNTVhd21Db3ljMUYw
TlNYN1NRYmxWWmdudkpkS3NHNEhOY2w3VndwWmJ5cHdIN0oya0FZY04xa3F2CncxcVRxblIrRDMv
YUduUjAwcUxNSGRrTlpXbzl2aVN2RzV5NE95NEx4WlZJbnpuZEs0QUxhREx3c0cwSzFwSGIKSlB3
RmVmK1BVTUd4OWxrOEdKZ3Yyd1FiZXN2ZWxHM2xmOWh2d0lGYklldUNRZXRIb09Lb25wRlFkV3k2
dU9iZgpiaytWTjkwL1BVeDJxNVdxem5qbWk2dkJqZE5zbHV5OERqZkxoTUtIbWVoT1hrSUltWlE9
Cj1mWk91Ci0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQo=

--===============7812263131202670325==--