Do we really want more runtime patching?

Posted May 8, 2026 17:42 UTC (Fri) by gus3 (guest, #61103)
In reply to: Do we really want more runtime patching? by MarcB
Parent article: killswitch for short-term emergency vulnerability mitigation

---

to post comments

Do we really want more runtime patching?

Posted May 8, 2026 18:43 UTC (Fri) by MarcB (subscriber, #101804) [Link] (1 responses)

Do we really want more runtime patching?

Posted May 9, 2026 5:24 UTC (Sat) by PlaguedByPenguins (subscriber, #3577) [Link]

FWIW our HPC systems have disabled module loads for years. maybe a decade.

# no more module loads...
echo 1 > /proc/sys/kernel/modules_disabled

# there's also no point in khelper calling out to modprobe
echo > /proc/sys/kernel/modprobe