Re: [PATCH net-next] modules: allow modprobe load regular elf binaries

From: David Miller
Date: Fri Mar 09 2018 - 13:35:17 EST


From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
Date: Fri, 9 Mar 2018 10:17:42 -0800

> - use deny_write_access() to make sure that we don't have active
> writers and cannot get them during the execve.

I agree that this is necessary for image validation purposes.