[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 7 Feb 2017 13:06:22 -0800
From: Kees Cook <keescook@...omium.org>
To: Laura Abbott <labbott@...hat.com>
Cc: Jason Wessel <jason.wessel@...driver.com>, Jonathan Corbet <corbet@....net>,
Russell King <linux@...linux.org.uk>, Catalin Marinas <catalin.marinas@....com>,
Will Deacon <will.deacon@....com>, "James E.J. Bottomley" <jejb@...isc-linux.org>,
Helge Deller <deller@....de>, Martin Schwidefsky <schwidefsky@...ibm.com>,
Heiko Carstens <heiko.carstens@...ibm.com>, Thomas Gleixner <tglx@...utronix.de>,
Ingo Molnar <mingo@...hat.com>, "H. Peter Anvin" <hpa@...or.com>, "x86@...nel.org" <x86@...nel.org>,
Rob Herring <robh@...nel.org>, "Rafael J. Wysocki" <rjw@...ysocki.net>, Len Brown <len.brown@...el.com>,
Pavel Machek <pavel@....cz>, Mark Rutland <mark.rutland@....com>, Jessica Yu <jeyu@...hat.com>,
"linux-doc@...r.kernel.org" <linux-doc@...r.kernel.org>, LKML <linux-kernel@...r.kernel.org>,
"linux-arm-kernel@...ts.infradead.org" <linux-arm-kernel@...ts.infradead.org>,
linux-parisc <linux-parisc@...r.kernel.org>,
"linux-s390@...r.kernel.org" <linux-s390@...r.kernel.org>, Linux PM list <linux-pm@...r.kernel.org>,
"kernel-hardening@...ts.openwall.com" <kernel-hardening@...ts.openwall.com>, Robin Murphy <robin.murphy@....com>
Subject: Re: [PATCHv3 0/2] Hardening configs refactor/rename
On Mon, Feb 6, 2017 at 4:31 PM, Laura Abbott <labbott@...hat.com> wrote:
> Hi,
>
> This is v3 of my series to rename/refactor CONFIG_DEBUG_RODATA
> and CONFIG_DEBUG_SET_MODULE_RONX. Among other objections, there shouldn't
> be 'debug' in the name since these provide necessary kernel protection.
>
> v3 mostly focuses on changing how the Kconfig dependencies work for the
> refactor. Russell King requested that these options be deselectable for arm.
> I also threw in some documentation on this under kernel hardening in case other
> arches decide to follow suit.
>
> The plan is for this to go through the KSPP tree so if people are okay with
> this, please give Acks. I didn't take Mark Rutland's ack from before since
> there's been a bit of refactoring.
Thanks! I've added this to my KSPP -next tree. It should appear shortly...
-Kees
>
> Thanks,
> Laura
>
> Laura Abbott (2):
> arch: Move CONFIG_DEBUG_RODATA and CONFIG_SET_MODULE_RONX to be common
> arch: Rename CONFIG_DEBUG_RODATA and CONFIG_DEBUG_MODULE_RONX
>
> Documentation/DocBook/kgdb.tmpl | 8 +++----
> Documentation/security/self-protection.txt | 10 +++++++--
> arch/Kconfig | 34 ++++++++++++++++++++++++++++++
> arch/arm/Kconfig | 4 ++++
> arch/arm/Kconfig.debug | 11 ----------
> arch/arm/configs/aspeed_g4_defconfig | 4 ++--
> arch/arm/configs/aspeed_g5_defconfig | 4 ++--
> arch/arm/include/asm/cacheflush.h | 2 +-
> arch/arm/kernel/patch.c | 4 ++--
> arch/arm/kernel/vmlinux.lds.S | 8 +++----
> arch/arm/mm/Kconfig | 14 +-----------
> arch/arm/mm/init.c | 4 ++--
> arch/arm64/Kconfig | 5 ++---
> arch/arm64/Kconfig.debug | 13 +-----------
> arch/arm64/kernel/insn.c | 2 +-
> arch/parisc/Kconfig | 1 +
> arch/parisc/Kconfig.debug | 11 ----------
> arch/parisc/configs/712_defconfig | 1 -
> arch/parisc/configs/c3000_defconfig | 1 -
> arch/parisc/mm/init.c | 2 +-
> arch/s390/Kconfig | 5 ++---
> arch/s390/Kconfig.debug | 3 ---
> arch/x86/Kconfig | 5 ++---
> arch/x86/Kconfig.debug | 11 ----------
> include/linux/filter.h | 4 ++--
> include/linux/init.h | 4 ++--
> include/linux/module.h | 2 +-
> init/main.c | 4 ++--
> kernel/configs/android-recommended.config | 2 +-
> kernel/module.c | 6 +++---
> kernel/power/hibernate.c | 2 +-
> kernel/power/power.h | 4 ++--
> kernel/power/snapshot.c | 4 ++--
> 33 files changed, 90 insertions(+), 109 deletions(-)
>
> --
> 2.7.4
>
--
Kees Cook
Pixel Security
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
