mirror of
https://github.com/torvalds/linux
synced 2024-09-21 11:38:48 +00:00
b700e7f03d
This commit introduces code for the live patching core. It implements an ftrace-based mechanism and kernel interface for doing live patching of kernel and kernel module functions. It represents the greatest common functionality set between kpatch and kgraft and can accept patches built using either method. This first version does not implement any consistency mechanism that ensures that old and new code do not run together. In practice, ~90% of CVEs are safe to apply in this way, since they simply add a conditional check. However, any function change that can not execute safely with the old version of the function can _not_ be safely applied in this version. [ jkosina@suse.cz: due to the number of contributions that got folded into this original patch from Seth Jennings, add SUSE's copyright as well, as discussed via e-mail ] Signed-off-by: Seth Jennings <sjenning@redhat.com> Signed-off-by: Josh Poimboeuf <jpoimboe@redhat.com> Reviewed-by: Miroslav Benes <mbenes@suse.cz> Reviewed-by: Petr Mladek <pmladek@suse.cz> Reviewed-by: Masami Hiramatsu <masami.hiramatsu.pt@hitachi.com> Signed-off-by: Miroslav Benes <mbenes@suse.cz> Signed-off-by: Petr Mladek <pmladek@suse.cz> Signed-off-by: Jiri Kosina <jkosina@suse.cz>
45 lines
1.3 KiB
Plaintext
45 lines
1.3 KiB
Plaintext
What: /sys/kernel/livepatch
|
|
Date: Nov 2014
|
|
KernelVersion: 3.19.0
|
|
Contact: live-patching@vger.kernel.org
|
|
Description:
|
|
Interface for kernel live patching
|
|
|
|
The /sys/kernel/livepatch directory contains subdirectories for
|
|
each loaded live patch module.
|
|
|
|
What: /sys/kernel/livepatch/<patch>
|
|
Date: Nov 2014
|
|
KernelVersion: 3.19.0
|
|
Contact: live-patching@vger.kernel.org
|
|
Description:
|
|
The patch directory contains subdirectories for each kernel
|
|
object (vmlinux or a module) in which it patched functions.
|
|
|
|
What: /sys/kernel/livepatch/<patch>/enabled
|
|
Date: Nov 2014
|
|
KernelVersion: 3.19.0
|
|
Contact: live-patching@vger.kernel.org
|
|
Description:
|
|
A writable attribute that indicates whether the patched
|
|
code is currently applied. Writing 0 will disable the patch
|
|
while writing 1 will re-enable the patch.
|
|
|
|
What: /sys/kernel/livepatch/<patch>/<object>
|
|
Date: Nov 2014
|
|
KernelVersion: 3.19.0
|
|
Contact: live-patching@vger.kernel.org
|
|
Description:
|
|
The object directory contains subdirectories for each function
|
|
that is patched within the object.
|
|
|
|
What: /sys/kernel/livepatch/<patch>/<object>/<function>
|
|
Date: Nov 2014
|
|
KernelVersion: 3.19.0
|
|
Contact: live-patching@vger.kernel.org
|
|
Description:
|
|
The function directory contains attributes regarding the
|
|
properties and state of the patched function.
|
|
|
|
There are currently no such attributes.
|