On Wed, 2018-07-11 at 14:19 +0200, Florian Weimer wrote: > On 07/11/2018 12:26 AM, Yu-cheng Yu wrote: > > > > arch_prctl(ARCH_CET_DISABLE, unsigned long features) > > Disable SHSTK and/or IBT specified in 'features'. Return > > -EPERM > > if CET is locked out. > > > > arch_prctl(ARCH_CET_LOCK) > > Lock out CET feature. > Isn't it a “lock in” rather than a “lock out”? Yes, that makes more sense. I will fix it.
