#security
1 post · all tags
-
30 min read
Livepatching the Linux kernel : through the eyes of an SRE
Rebooting a whole hypervisor fleet for every KVM escape isn't always an option. Writing a livepatch by hand for Januscape, letting kpatch-build do it for Pwnescape, and why cumulative patches matter.