RepoMirrors/kpatch
1
0
Fork 0
mirror of https://github.com/dynup/kpatch synced 2025-01-27 15:22:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

README livepatch update

Browse Source
This commit is contained in:
Josh Poimboeuf 2015-03-25 17:17:09 -05:00
parent 533197811a
commit d50b0b9218
1 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
README.md
View File

@ -8,9 +8,6 @@ without having to wait for long-running tasks to complete, for users to log
off, or for scheduled reboot windows. It gives more control over uptime off, or for scheduled reboot windows. It gives more control over uptime
without sacrificing security or stability. without sacrificing security or stability.
kpatch is currently in active development. For now, it should _not_ be used
in production environments.
**WARNING: Use with caution! Kernel crashes, spontaneous reboots, and data loss **WARNING: Use with caution! Kernel crashes, spontaneous reboots, and data loss
may occur!** may occur!**
@ -425,6 +422,21 @@ Limitations
Frequently Asked Questions Frequently Asked Questions
-------------------------- --------------------------
**Q. What's the relationship between kpatch and the upstream Linux live kernel
patching component (livepatch)?**
Starting with Linux 4.0, the Linux kernel will have livepatch, which is a new
converged live kernel patching framework. Livepatch is similar in
functionality to the kpatch core module, though it doesn't yet have all the
features that kpatch does.
kpatch-build already works with both livepatch and kpatch. If your kernel has
CONFIG\_LIVEPATCH enabled, it detects that and builds a patch module in the
livepatch format. Otherwise it builds a kpatch patch module.
Soon the kpatch script will also support both patch module formats (TODO issue
[#479](https://github.com/dynup/kpatch/issues/479)).
**Q. Isn't this just a virus/rootkit injection framework?** **Q. Isn't this just a virus/rootkit injection framework?**
kpatch uses kernel modules to replace code. It requires the `CAP_SYS_MODULE` kpatch uses kernel modules to replace code. It requires the `CAP_SYS_MODULE`