On Mon, Feb 6, 2017 at 4:31 PM, Laura Abbott <labbott@xxxxxxxxxx> wrote: > Hi, > > This is v3 of my series to rename/refactor CONFIG_DEBUG_RODATA > and CONFIG_DEBUG_SET_MODULE_RONX. Among other objections, there shouldn't > be 'debug' in the name since these provide necessary kernel protection. > > v3 mostly focuses on changing how the Kconfig dependencies work for the > refactor. Russell King requested that these options be deselectable for arm. > I also threw in some documentation on this under kernel hardening in case other > arches decide to follow suit. > > The plan is for this to go through the KSPP tree so if people are okay with > this, please give Acks. I didn't take Mark Rutland's ack from before since > there's been a bit of refactoring. Thanks! I've added this to my KSPP -next tree. It should appear shortly... -Kees > > Thanks, > Laura > > Laura Abbott (2): > arch: Move CONFIG_DEBUG_RODATA and CONFIG_SET_MODULE_RONX to be common > arch: Rename CONFIG_DEBUG_RODATA and CONFIG_DEBUG_MODULE_RONX > > Documentation/DocBook/kgdb.tmpl | 8 +++---- > Documentation/security/self-protection.txt | 10 +++++++-- > arch/Kconfig | 34 ++++++++++++++++++++++++++++++ > arch/arm/Kconfig | 4 ++++ > arch/arm/Kconfig.debug | 11 ---------- > arch/arm/configs/aspeed_g4_defconfig | 4 ++-- > arch/arm/configs/aspeed_g5_defconfig | 4 ++-- > arch/arm/include/asm/cacheflush.h | 2 +- > arch/arm/kernel/patch.c | 4 ++-- > arch/arm/kernel/vmlinux.lds.S | 8 +++---- > arch/arm/mm/Kconfig | 14 +----------- > arch/arm/mm/init.c | 4 ++-- > arch/arm64/Kconfig | 5 ++--- > arch/arm64/Kconfig.debug | 13 +----------- > arch/arm64/kernel/insn.c | 2 +- > arch/parisc/Kconfig | 1 + > arch/parisc/Kconfig.debug | 11 ---------- > arch/parisc/configs/712_defconfig | 1 - > arch/parisc/configs/c3000_defconfig | 1 - > arch/parisc/mm/init.c | 2 +- > arch/s390/Kconfig | 5 ++--- > arch/s390/Kconfig.debug | 3 --- > arch/x86/Kconfig | 5 ++--- > arch/x86/Kconfig.debug | 11 ---------- > include/linux/filter.h | 4 ++-- > include/linux/init.h | 4 ++-- > include/linux/module.h | 2 +- > init/main.c | 4 ++-- > kernel/configs/android-recommended.config | 2 +- > kernel/module.c | 6 +++--- > kernel/power/hibernate.c | 2 +- > kernel/power/power.h | 4 ++-- > kernel/power/snapshot.c | 4 ++-- > 33 files changed, 90 insertions(+), 109 deletions(-) > > -- > 2.7.4 > -- Kees Cook Pixel Security -- To unsubscribe from this list: send the line "unsubscribe linux-s390" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
