AWS Security ChangesHomeSearch

AWS linux documentation change

Service: linux · 2025-09-28 · Documentation medium

File: linux/al2/ug/al2-live-patching.md

Summary

Modified service enablement command to include immediate start of kpatch.service

Security assessment

The change improves documentation for kernel live patching setup but doesn't address a specific security vulnerability. While live patching itself is a security feature, the command modification (adding service start) is operational guidance rather than a direct security fix.

Diff

diff --git a/linux/al2/ug/al2-live-patching.md b/linux/al2/ug/al2-live-patching.md
index e772e92e7..59acd429e 100644
--- a//linux/al2/ug/al2-live-patching.md
+++ b//linux/al2/ug/al2-live-patching.md
@@ -202 +202 @@ When you enable Kernel Live Patching, an empty kernel live patch RPM is automati
-        $ sudo systemctl enable kpatch.service
+        $ sudo systemctl enable kpatch.service && sudo systemctl start kpatch.service