Block specific updates

I have an SR open but looking for a faster response in case someone has already experienced this issue.

I'm using an RDAC fibre module that has to be built against base SLES10-SP4 kernel. It's not supported on later kernel versions in the patch channel. I still want to patch the server for OES2 patches.

If I go into software management and lock the kernel and kernel-source. Then go back in the kernel and kernel source is unlocked.

Looking at rug there is a lock command rug la
Trying rug la kernel*
Then running rug ref
rug lu SLES10-SP4-Updates OES2-SP3-Updates
I still see an updated kernel wanting to be deployed.

Anyone have any experience locking updates out of the channel ?