gabrielesvelto, 22 days ago

I've updated my tutorial on how to monitor #ECC memory on #Linux to include information about the kernel_lockdown LSM, and how to make it work when it's enabled.

Long story short, you can still monitor corrected & uncorrected memory errors with kernel lock-down enabled, but only using integrity mode. rasdaemon is incompatible with kernel lock-down confidentiality mode, as it deliberately hides kernel information from userspace applications.

https://www.setphaserstostun.org/posts/monitoring-ecc-memory-on-linux-with-rasdaemon/