Wouldn't it be safer if the /etc/init.d/microcode_ctl script removed the microcode device after update? In the same manner as the script at start checks for the microcode device and in case loads the microcode module, after updating a line like: grep -qo ' microcode$' /proc/misc && rmmod microcode >& /dev/null could try to unload the microcode module so that the microcode device is no more accessible, not even by mistake. On my system the microcode device is provided as a kernel module and the whole thing in /var/log/message is recorded as: IA-32 Microcode Update Driver: v1.14 <tigran@veritas.com> microcode: CPU0 updated from revision 0x0 to 0x13, date = 02062001 IA-32 Microcode Update Driver v1.14 unregistered Best wishes, ilGino
ive made it an option in the conf.d file ... MICROCODE_UNLOAD=yes
