Do we really want more runtime patching? [LWN.net]

Do we really want more runtime patching?

Posted May 9, 2026 5:24 UTC (Sat) by PlaguedByPenguins (subscriber, #3577)
In reply to: Do we really want more runtime patching? by MarcB
Parent article: killswitch for short-term emergency vulnerability mitigation

FWIW our HPC systems have disabled module loads for years. maybe a decade.

# no more module loads...
echo 1 > /proc/sys/kernel/modules_disabled

# there's also no point in khelper calling out to modprobe
echo > /proc/sys/kernel/modprobe