Messages in this thread | | | Subject | Re: [PATCH v16 02/26] x86/cet/shstk: Add Kconfig option for user-mode control-flow protection | From | "Yu, Yu-cheng" <> | Date | Tue, 29 Dec 2020 08:34:51 -0800 |
| |
On 12/29/2020 4:39 AM, Borislav Petkov wrote: > On Wed, Dec 09, 2020 at 02:22:56PM -0800, Yu-cheng Yu wrote: >> Shadow Stack provides protection against function return address >> corruption. It is active when the processor supports it, the kernel has >> CONFIG_X86_CET_USER, and the application is built for the feature. > ^ > enabled. > >> This is only implemented for the 64-bit kernel. When it is enabled, legacy >> non-Shadow Stack applications continue to work, but without protection. >> >> Signed-off-by: Yu-cheng Yu <yu-cheng.yu@intel.com> >> --- >> arch/x86/Kconfig | 22 ++++++++++++++++++++++ >> arch/x86/Kconfig.assembler | 5 +++++ >> 2 files changed, 27 insertions(+) > > Rest looks good, thanks. >
Thanks! I will re-base to v5.11-rc1 and send out a new version.
-- Yu-cheng
| |