[v5,21/22] x86/purgatory: Disable CFI

Message ID	20220908215504.3686827-22-samitolvanen@google.com (mailing list archive)
State	Changes Requested
Headers	show Return-Path: <linux-hardening-owner@kernel.org> Date: Thu, 8 Sep 2022 14:55:03 -0700 In-Reply-To: <20220908215504.3686827-1-samitolvanen@google.com> Message-Id: <20220908215504.3686827-22-samitolvanen@google.com> Mime-Version: 1.0 References: <20220908215504.3686827-1-samitolvanen@google.com> Subject: [PATCH v5 21/22] x86/purgatory: Disable CFI From: Sami Tolvanen <samitolvanen@google.com> To: linux-kernel@vger.kernel.org Cc: Kees Cook <keescook@chromium.org>, Josh Poimboeuf <jpoimboe@redhat.com>, Peter Zijlstra <peterz@infradead.org>, x86@kernel.org, Catalin Marinas <catalin.marinas@arm.com>, Will Deacon <will@kernel.org>, Mark Rutland <mark.rutland@arm.com>, Nathan Chancellor <nathan@kernel.org>, Nick Desaulniers <ndesaulniers@google.com>, Joao Moreira <joao@overdrivepizza.com>, Sedat Dilek <sedat.dilek@gmail.com>, Steven Rostedt <rostedt@goodmis.org>, linux-hardening@vger.kernel.org, linux-arm-kernel@lists.infradead.org, llvm@lists.linux.dev, Sami Tolvanen <samitolvanen@google.com> Content-Type: text/plain; charset="UTF-8" Precedence: bulk
Series	KCFI support \| expand [v5,00/22] KCFI support [v5,01/22] treewide: Filter out CC_FLAGS_CFI [v5,02/22] scripts/kallsyms: Ignore __kcfi_typeid_ [v5,03/22] cfi: Remove CONFIG_CFI_CLANG_SHADOW [v5,04/22] cfi: Drop __CFI_ADDRESSABLE [v5,05/22] cfi: Switch to -fsanitize=kcfi [v5,06/22] cfi: Add type helper macros [v5,07/22] lkdtm: Emit an indirect call for CFI tests [v5,08/22] psci: Fix the function type for psci_initcall_t [v5,09/22] arm64: Add types to indirect called assembly functions [v5,10/22] arm64: Add CFI error handling [v5,11/22] arm64: Drop unneeded __nocfi attributes [v5,12/22] init: Drop __nocfi from __init [v5,13/22] treewide: Drop function_nocfi [v5,14/22] treewide: Drop WARN_ON_FUNCTION_MISMATCH [v5,15/22] treewide: Drop __cficanonical [v5,16/22] objtool: Preserve special st_shndx indexes in elf_update_symbol [v5,17/22] objtool: Disable CFI warnings [v5,18/22] kallsyms: Drop CONFIG_CFI_CLANG workarounds [v5,19/22] x86/tools/relocs: Ignore __kcfi_typeid_ relocations [v5,20/22] x86: Add types to indirectly called assembly functions [v5,21/22] x86/purgatory: Disable CFI [v5,22/22] x86: Add support for CONFIG_CFI_CLANG

Message ID

20220908215504.3686827-22-samitolvanen@google.com (mailing list archive)

State

Changes Requested

Headers

Date: Thu,  8 Sep 2022 14:55:03 -0700
In-Reply-To: <20220908215504.3686827-1-samitolvanen@google.com>
Message-Id: <20220908215504.3686827-22-samitolvanen@google.com>
Mime-Version: 1.0
References: <20220908215504.3686827-1-samitolvanen@google.com>
Subject: [PATCH v5 21/22] x86/purgatory: Disable CFI
From: Sami Tolvanen <samitolvanen@google.com>
To: linux-kernel@vger.kernel.org
Cc: Kees Cook <keescook@chromium.org>,
        Josh Poimboeuf <jpoimboe@redhat.com>,
        Peter Zijlstra <peterz@infradead.org>, x86@kernel.org,
        Catalin Marinas <catalin.marinas@arm.com>,
        Will Deacon <will@kernel.org>,
        Mark Rutland <mark.rutland@arm.com>,
        Nathan Chancellor <nathan@kernel.org>,
        Nick Desaulniers <ndesaulniers@google.com>,
        Joao Moreira <joao@overdrivepizza.com>,
        Sedat Dilek <sedat.dilek@gmail.com>,
        Steven Rostedt <rostedt@goodmis.org>,
        linux-hardening@vger.kernel.org,
        linux-arm-kernel@lists.infradead.org, llvm@lists.linux.dev,
        Sami Tolvanen <samitolvanen@google.com>
Content-Type: text/plain; charset="UTF-8"
Precedence: bulk

Series

KCFI support | expand

Commit Message

Sami Tolvanen Sept. 8, 2022, 9:55 p.m. UTC

Disable CONFIG_CFI_CLANG for the stand-alone purgatory.ro.

Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
Reviewed-by: Nick Desaulniers <ndesaulniers@google.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Tested-by: Nick Desaulniers <ndesaulniers@google.com>
Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
Tested-by: Kees Cook <keescook@chromium.org>
Tested-by: Nathan Chancellor <nathan@kernel.org>
---
 arch/x86/purgatory/Makefile | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/arch/x86/purgatory/Makefile b/arch/x86/purgatory/Makefile
index 31c634a22818..58a200dc762d 100644
--- a/arch/x86/purgatory/Makefile
+++ b/arch/x86/purgatory/Makefile
@@ -55,6 +55,10 @@  ifdef CONFIG_RETPOLINE
 PURGATORY_CFLAGS_REMOVE		+= $(RETPOLINE_CFLAGS)
 endif
 
+ifdef CONFIG_CFI_CLANG
+PURGATORY_CFLAGS_REMOVE		+= $(CC_FLAGS_CFI)
+endif
+
 CFLAGS_REMOVE_purgatory.o	+= $(PURGATORY_CFLAGS_REMOVE)
 CFLAGS_purgatory.o		+= $(PURGATORY_CFLAGS)

[v5,21/22] x86/purgatory: Disable CFI

Commit Message

Patch