diff options
| author | Kees Cook <[email protected]> | 2024-05-01 00:02:22 +0000 |
|---|---|---|
| committer | Kees Cook <[email protected]> | 2024-06-19 19:41:08 +0000 |
| commit | d6f635bcaca8d38dfa47ee20658705f9eff156b5 (patch) | |
| tree | 22797324cba2df59d8c04d42d95e71884bc39e85 /scripts/gcc-plugins/gcc-common.h | |
| parent | lkdtm/bugs: add test for hung smp_call_function_single() (diff) | |
| download | kernel-d6f635bcaca8d38dfa47ee20658705f9eff156b5.tar.gz kernel-d6f635bcaca8d38dfa47ee20658705f9eff156b5.zip | |
x86/alternatives: Make FineIBT mode Kconfig selectable
Since FineIBT performs checking at the destination, it is weaker against
attacks that can construct arbitrary executable memory contents. As such,
some system builders want to run with FineIBT disabled by default. Allow
the "cfi=kcfi" boot param mode to be selectable through Kconfig via the
newly introduced CONFIG_CFI_AUTO_DEFAULT.
Reviewed-by: Sami Tolvanen <[email protected]>
Reviewed-by: Nathan Chancellor <[email protected]>
Tested-by: Nathan Chancellor <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Kees Cook <[email protected]>
Diffstat (limited to 'scripts/gcc-plugins/gcc-common.h')
0 files changed, 0 insertions, 0 deletions