Messages in this thread | | | Date | Wed, 19 Oct 2022 13:38:17 +0200 | From | Peter Zijlstra <> | Subject | Re: [PATCH] x86/ibt: Implement FineIBT |
| |
On Tue, Oct 18, 2022 at 04:31:48PM -0700, Josh Poimboeuf wrote:
> Is there a reason not to default to FineIBT if the hardware supports it?
Not really; and that's the default implemented here. Kees seems to think the kCFI thing is a little more resillient against attacks where the attacker can write code -- but IMO that's a bit of a lost cause.
Being able to run kCFI on IBT hardware is useful for development/debugging purposes though.
| |