On Wed, Nov 08, 2017 at 04:21:33PM +0000, David Howells wrote: > Hi, > > I need to lock down kprobes under secure boot conditions as part of the patch > series that can be found here: > > > https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git/log/?h=efi-lock-down > > Can you tell me that if the attached patch is sufficient to the cause?
This will not prevent the raw kprobe events from working. If your intention is to prevent *any* kprobe registration, the best place to do that is in register_kprobe() in kernel/probes.c Ananth
