Re: [PATCH v26 1/9] x86/cet/ibt: Add Kconfig option for Indirect Branch Tracking

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Yu-cheng Yu <yu-cheng.yu@xxxxxxxxx>
Subject: Re: [PATCH v26 1/9] x86/cet/ibt: Add Kconfig option for Indirect Branch Tracking
From: Kees Cook <keescook@xxxxxxxxxxxx>
Date: Wed, 28 Apr 2021 13:29:20 -0700
Cc: x86@xxxxxxxxxx, "H. Peter Anvin" <hpa@xxxxxxxxx>, Thomas Gleixner <tglx@xxxxxxxxxxxxx>, Ingo Molnar <mingo@xxxxxxxxxx>, linux-kernel@xxxxxxxxxxxxxxx, linux-doc@xxxxxxxxxxxxxxx, linux-mm@xxxxxxxxx, linux-arch@xxxxxxxxxxxxxxx, linux-api@xxxxxxxxxxxxxxx, Arnd Bergmann <arnd@xxxxxxxx>, Andy Lutomirski <luto@xxxxxxxxxx>, Balbir Singh <bsingharora@xxxxxxxxx>, Borislav Petkov <bp@xxxxxxxxx>, Cyrill Gorcunov <gorcunov@xxxxxxxxx>, Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>, Eugene Syromiatnikov <esyr@xxxxxxxxxx>, Florian Weimer <fweimer@xxxxxxxxxx>, "H.J. Lu" <hjl.tools@xxxxxxxxx>, Jann Horn <jannh@xxxxxxxxxx>, Jonathan Corbet <corbet@xxxxxxx>, Mike Kravetz <mike.kravetz@xxxxxxxxxx>, Nadav Amit <nadav.amit@xxxxxxxxx>, Oleg Nesterov <oleg@xxxxxxxxxx>, Pavel Machek <pavel@xxxxxx>, Peter Zijlstra <peterz@xxxxxxxxxxxxx>, Randy Dunlap <rdunlap@xxxxxxxxxxxxx>, "Ravi V. Shankar" <ravi.v.shankar@xxxxxxxxx>, Vedvyas Shanbhogue <vedvyas.shanbhogue@xxxxxxxxx>, Dave Martin <Dave.Martin@xxxxxxx>, Weijiang Yang <weijiang.yang@xxxxxxxxx>, Pengfei Xu <pengfei.xu@xxxxxxxxx>, Haitao Huang <haitao.huang@xxxxxxxxx>
In-reply-to: <20210427204720.25007-2-yu-cheng.yu@intel.com>
References: <20210427204720.25007-1-yu-cheng.yu@intel.com> <20210427204720.25007-2-yu-cheng.yu@intel.com>

On Tue, Apr 27, 2021 at 01:47:12PM -0700, Yu-cheng Yu wrote:
> Indirect Branch Tracking (IBT) provides protection against CALL-/JMP-
> oriented programming attacks.  It is active when the kernel has this
> feature enabled, and the processor and the application support it.
> When this feature is enabled, legacy non-IBT applications continue to
> work, but without IBT protection.
> 
> Signed-off-by: Yu-cheng Yu <yu-cheng.yu@xxxxxxxxx>

Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx>

-- 
Kees Cook

References:
- [PATCH v26 0/9] Control-flow Enforcement: Indirect Branch Tracking
  - From: Yu-cheng Yu
- [PATCH v26 1/9] x86/cet/ibt: Add Kconfig option for Indirect Branch Tracking
  - From: Yu-cheng Yu

Prev by Date: [linux-next:master] BUILD REGRESSION a5fb44b89809a00cfb85997529d8430ed0759ea5
Next by Date: Re: [PATCH v26 8/9] x86/vdso/32: Add ENDBR to __kernel_vsyscall entry point
Previous by thread: [PATCH v26 1/9] x86/cet/ibt: Add Kconfig option for Indirect Branch Tracking
Next by thread: [PATCH v26 2/9] x86/cet/ibt: Add user-mode Indirect Branch Tracking support
Index(es):
- Date
- Thread

[Index of Archives] [Linux ARM Kernel] [Linux ARM] [Linux Omap] [Fedora ARM] [IETF Annouce] [Bugtraq] [Linux OMAP] [Linux MIPS] [eCos] [Asterisk Internet PBX] [Linux API]