On Wed, Sep 04, 2024 at 09:18:37AM +0800, Hongbo Li wrote: > This 'struct kobj_type' is not modified. It is only used in > kobject_init_and_add() which takes a 'const struct kobj_type *ktype' > parameter. > > Constifying this structure and moving it to a read-only section, > and this can increase over all security. > > ``` > [Before] > text data bss dec hex filename > 2372 600 0 2972 b9c drivers/vfio/mdev/mdev_sysfs.o > > [After] > text data bss dec hex filename > 2436 568 0 3004 bbc drivers/vfio/mdev/mdev_sysfs.o > ``` > > Signed-off-by: Hongbo Li <lihongbo22@xxxxxxxxxx> > --- > drivers/vfio/mdev/mdev_sysfs.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) Reviewed-by: Jason Gunthorpe <jgg@xxxxxxxxxx> Jason
