[RFC,19/21] x86/purgatory: Disable CFI

Message ID	20220429203644.2868448-20-samitolvanen@google.com (mailing list archive)
State	Superseded
Headers	show Return-Path: <linux-hardening-owner@kernel.org> Date: Fri, 29 Apr 2022 13:36:42 -0700 In-Reply-To: <20220429203644.2868448-1-samitolvanen@google.com> Message-Id: <20220429203644.2868448-20-samitolvanen@google.com> Mime-Version: 1.0 References: <20220429203644.2868448-1-samitolvanen@google.com> Subject: [RFC PATCH 19/21] x86/purgatory: Disable CFI From: Sami Tolvanen <samitolvanen@google.com> To: linux-kernel@vger.kernel.org Cc: Kees Cook <keescook@chromium.org>, Josh Poimboeuf <jpoimboe@redhat.com>, Peter Zijlstra <peterz@infradead.org>, x86@kernel.org, Catalin Marinas <catalin.marinas@arm.com>, Will Deacon <will@kernel.org>, Mark Rutland <mark.rutland@arm.com>, Nathan Chancellor <nathan@kernel.org>, Nick Desaulniers <ndesaulniers@google.com>, Joao Moreira <joao@overdrivepizza.com>, Sedat Dilek <sedat.dilek@gmail.com>, Steven Rostedt <rostedt@goodmis.org>, linux-hardening@vger.kernel.org, linux-arm-kernel@lists.infradead.org, llvm@lists.linux.dev, Sami Tolvanen <samitolvanen@google.com> Content-Type: text/plain; charset="UTF-8" Precedence: bulk
Series	KCFI support \| expand [RFC,00/21] KCFI support [RFC,01/21] efi/libstub: Filter out CC_FLAGS_CFI [RFC,02/21] arm64/vdso: Filter out CC_FLAGS_CFI [RFC,03/21] kallsyms: Ignore __kcfi_typeid_ [RFC,04/21] cfi: Remove CONFIG_CFI_CLANG_SHADOW [RFC,05/21] cfi: Drop __CFI_ADDRESSABLE [RFC,06/21] cfi: Switch to -fsanitize=kcfi [RFC,07/21] cfi: Add type helper macros [RFC,08/21] arm64/crypto: Add types to indirect called assembly functions [RFC,09/21] arm64: Add CFI error handling [RFC,10/21] treewide: Drop function_nocfi [RFC,11/21] treewide: Drop WARN_ON_FUNCTION_MISMATCH [RFC,12/21] treewide: Drop __cficanonical [RFC,13/21] cfi: Add the cfi_unchecked macro [RFC,14/21] treewide: static_call: Pass call arguments to the macro [RFC,15/21] static_call: Use cfi_unchecked [RFC,16/21] objtool: Add support for CONFIG_CFI_CLANG [RFC,17/21] x86/tools/relocs: Ignore __kcfi_typeid_ relocations [RFC,18/21] x86: Add types to indirect called assembly functions [RFC,19/21] x86/purgatory: Disable CFI [RFC,20/21] x86/vdso: Disable CFI [RFC,21/21] x86: Add support for CONFIG_CFI_CLANG

Message ID

20220429203644.2868448-20-samitolvanen@google.com (mailing list archive)

State

Superseded

Headers

Date: Fri, 29 Apr 2022 13:36:42 -0700
In-Reply-To: <20220429203644.2868448-1-samitolvanen@google.com>
Message-Id: <20220429203644.2868448-20-samitolvanen@google.com>
Mime-Version: 1.0
References: <20220429203644.2868448-1-samitolvanen@google.com>
Subject: [RFC PATCH 19/21] x86/purgatory: Disable CFI
From: Sami Tolvanen <samitolvanen@google.com>
To: linux-kernel@vger.kernel.org
Cc: Kees Cook <keescook@chromium.org>,
        Josh Poimboeuf <jpoimboe@redhat.com>,
        Peter Zijlstra <peterz@infradead.org>, x86@kernel.org,
        Catalin Marinas <catalin.marinas@arm.com>,
        Will Deacon <will@kernel.org>,
        Mark Rutland <mark.rutland@arm.com>,
        Nathan Chancellor <nathan@kernel.org>,
        Nick Desaulniers <ndesaulniers@google.com>,
        Joao Moreira <joao@overdrivepizza.com>,
        Sedat Dilek <sedat.dilek@gmail.com>,
        Steven Rostedt <rostedt@goodmis.org>,
        linux-hardening@vger.kernel.org,
        linux-arm-kernel@lists.infradead.org, llvm@lists.linux.dev,
        Sami Tolvanen <samitolvanen@google.com>
Content-Type: text/plain; charset="UTF-8"
Precedence: bulk

Series

KCFI support | expand

Commit Message

Sami Tolvanen April 29, 2022, 8:36 p.m. UTC

Disable CONFIG_CFI_CLANG for the stand-alone purgatory.ro.

Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
Reviewed-by: Nick Desaulniers <ndesaulniers@google.com>
Tested-by: Nick Desaulniers <ndesaulniers@google.com>
Tested-by: Sedat Dilek <sedat.dilek@gmail.com>
---
 arch/x86/purgatory/Makefile | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/arch/x86/purgatory/Makefile b/arch/x86/purgatory/Makefile
index ae53d54d7959..b3fa947fa38b 100644
--- a/arch/x86/purgatory/Makefile
+++ b/arch/x86/purgatory/Makefile
@@ -55,6 +55,10 @@  ifdef CONFIG_RETPOLINE
 PURGATORY_CFLAGS_REMOVE		+= $(RETPOLINE_CFLAGS)
 endif
 
+ifdef CONFIG_CFI_CLANG
+PURGATORY_CFLAGS_REMOVE		+= $(CC_FLAGS_CFI)
+endif
+
 CFLAGS_REMOVE_purgatory.o	+= $(PURGATORY_CFLAGS_REMOVE)
 CFLAGS_purgatory.o		+= $(PURGATORY_CFLAGS)

[RFC,19/21] x86/purgatory: Disable CFI

Commit Message

Patch