It's important to note that it's not exactly production ready, but it can work with really simple CVEs (things that don't require changes to data structures and such).
Because of this, kpatch needs a person to manually review the patch before applying it, so some kernel knowledge is required to make sure that you're making a good patch.
I do think that it'll get better as time goes on. This is a really neat feature and brings an open source competitor to ksplice.
http://events.linuxfoundation.org/sites/events/files/slides/...
It's important to note that it's not exactly production ready, but it can work with really simple CVEs (things that don't require changes to data structures and such).
Because of this, kpatch needs a person to manually review the patch before applying it, so some kernel knowledge is required to make sure that you're making a good patch.
I do think that it'll get better as time goes on. This is a really neat feature and brings an open source competitor to ksplice.