On Tue, Nov 5, 2013 at 3:44 AM, Yicheng <qycqycqycqycqyc@xxxxxxxxx> wrote: > IMHO, the FFI feature should have the same priority as 'insmod' operations. > Because what FFI API can do is the same as (or subset of) kernel modules, it > should > be fine if it is managed as kernel modules. > Yeh, it seems we cannot do anything if user want to crash kernel in intrusive mode, just like we don't have a good approach to prevent bad kernel modules. :) Jovi