On Mon, 2015-03-16 at 14:36 -0700, Kees Cook wrote: > Perhaps this should be folded into the hibernation_available check > instead of added as an "||" check here?
That would end up covering in-kernel hibernation as well, which was more than I was aiming to do. But it's plausibly a justifiable implementation at the moment.

