On Wed, 2020-02-05 at 16:16 -0800, Randy Dunlap wrote: > Hi, > > I have a few comments and a question (please see inline below). > > > On 2/5/20 10:19 AM, Yu-cheng Yu wrote: [...] > > +arch_prctl(ARCH_X86_CET_LOCK) > > + Lock in CET feature. > > which feature? Both SHSTK and IBT are locked. They cannot be turned off afterwards. I will check things you pointed out. Thanks, Yu-cheng