On 07/11/2018 12:26 AM, Yu-cheng Yu wrote:
arch_prctl(ARCH_CET_DISABLE, unsigned long features) Disable SHSTK and/or IBT specified in 'features'. Return -EPERM if CET is locked out. arch_prctl(ARCH_CET_LOCK) Lock out CET feature.
Isn't it a “lock in” rather than a “lock out”? Thanks, Florian