From: "Mike Pagano" <mpagano@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] proj/linux-patches:master commit in: /
Date: Sun, 5 May 2024 17:54:52 +0000 (UTC) [thread overview]
Message-ID: <1714931653.abbbd285be43f4a758e4cbaac9cf33c6bc74e32a.mpagano@gentoo> (raw)
commit: abbbd285be43f4a758e4cbaac9cf33c6bc74e32a
Author: Mike Pagano <mpagano <AT> gentoo <DOT> org>
AuthorDate: Sun May 5 17:54:13 2024 +0000
Commit: Mike Pagano <mpagano <AT> gentoo <DOT> org>
CommitDate: Sun May 5 17:54:13 2024 +0000
URL: https://gitweb.gentoo.org/proj/linux-patches.git/commit/?id=abbbd285
Update to KSPP patch
Bug: https://bugs.gentoo.org/930733
Signed-off-by: Mike Pagano <mpagano <AT> gentoo.org>
4567_distro-Gentoo-Kconfig.patch | 33 +++++++++++++++++++++------------
1 file changed, 21 insertions(+), 12 deletions(-)
diff --git a/4567_distro-Gentoo-Kconfig.patch b/4567_distro-Gentoo-Kconfig.patch
index 6134393f..87b8fa95 100644
--- a/4567_distro-Gentoo-Kconfig.patch
+++ b/4567_distro-Gentoo-Kconfig.patch
@@ -6,9 +6,9 @@
source "Documentation/Kconfig"
+
+source "distro/Kconfig"
---- /dev/null 2024-04-27 13:10:54.188000027 -0400
-+++ b/distro/Kconfig 2024-04-27 17:56:56.723132353 -0400
-@@ -0,0 +1,295 @@
+--- /dev/null 2024-05-05 10:40:37.103999988 -0400
++++ b/distro/Kconfig 2024-05-05 13:37:37.699554927 -0400
+@@ -0,0 +1,310 @@
+menu "Gentoo Linux"
+
+config GENTOO_LINUX
@@ -178,7 +178,7 @@
+ to unmet dependencies. Search for GENTOO_KERNEL_SELF_PROTECTION_COMMON and search for
+ GENTOO_KERNEL_SELF_PROTECTION_{X86_64, ARM64, X86_32, ARM} for dependency information on your
+ specific architecture.
-+ Note 2: Please see the URL above for numeric settings, e.g. CONFIG_DEFAULT_MMAP_MIN_ADDR=65536
++ Note 2: Please see the URL above for numeric settings, e.g. CONFIG_DEFAULT_MMAP_MIN_ADDR=65536
+ for X86_64
+
+if GENTOO_KERNEL_SELF_PROTECTION
@@ -201,10 +201,13 @@
+ select DEBUG_SG
+ select HARDENED_USERCOPY if HAVE_HARDENED_USERCOPY_ALLOCATOR=y
+ select KFENCE if HAVE_ARCH_KFENCE && (!SLAB || SLUB)
++ select PAGE_TABLE_CHECK if ARCH_SUPPORTS_PAGE_TABLE_CHECK=y && EXCLUSIVE_SYSTEM_RAM=y
++ select PAGE_TABLE_CHECK_ENFORCED if PAGE_TABLE_CHECK=y
+ select RANDOMIZE_KSTACK_OFFSET_DEFAULT if HAVE_ARCH_RANDOMIZE_KSTACK_OFFSET && (INIT_STACK_NONE || !CC_IS_CLANG || CLANG_VERSION>=140000)
+ select SECURITY_LANDLOCK
+ select SCHED_CORE if SCHED_SMT
+ select BUG_ON_DATA_CORRUPTION
++ select RANDOM_KMALLOC_CACHE if SLUB_TINY=n
+ select SCHED_STACK_END_CHECK
+ select SECCOMP if HAVE_ARCH_SECCOMP
+ select SECCOMP_FILTER if HAVE_ARCH_SECCOMP_FILTER
@@ -245,11 +248,13 @@
+ default n
+
+ select GCC_PLUGIN_STACKLEAK
++ select X86_KERNEL_IBT if CC_HAS_IBT=y && HAVE_OBJTOOL=y && (!LD_IS_LLD=n || LLD_VERSION>=140000)
+ select LEGACY_VSYSCALL_NONE
+ select PAGE_TABLE_ISOLATION
+ select RANDOMIZE_BASE
+ select RANDOMIZE_MEMORY
+ select RELOCATABLE
++ select X86_USER_SHADOW_STACK if AS_WRUSS=Y
+ select VMAP_STACK
+
+
@@ -259,11 +264,21 @@
+ depends on ARM64
+ default n
+
-+ select RANDOMIZE_BASE
-+ select RELOCATABLE
++ select ARM64_BTI
++ select ARM64_E0PD
++ select ARM64_EPAN if ARM64_PAN=y
++ select ARM64_MTE if (ARM64_AS_HAS_MTE=y && ARM64_TAGGED_ADDR_ABI=y ) && ( AS_HAS_ARMV8_5=y ) && ( AS_HAS_LSE_ATOMICS=y ) && ( ARM64_PAN=y )
++ select ARM64_PTR_AUTH
++ select ARM64_PTR_AUTH_KERNEL if ( ARM64_PTR_AUTH=y ) && (( CC_HAS_SIGN_RETURN_ADDRESS=y || CC_HAS_BRANCH_PROT_PAC_RET=y ) && AS_HAS_ARMV8_3=y ) && ( LD_IS_LLD=y || LD_VERSION >= 23301 || ( CC_IS_GCC=y && GCC_VERSION < 90100 )) && (CC_IS_CLANG=n || AS_HAS_CFI_NEGATE_RA_STATE=y ) && ((FUNCTION_GRAPH_TRACER=n || DYNAMIC_FTRACE_WITH_ARGS=y ))
++ select ARM64_BTI_KERNEL if ( ARM64_BTI=y ) && ( ARM64_PTR_AUTH_KERNEL=y ) && ( CC_HAS_BRANCH_PROT_PAC_RET_BTI=y ) && (CC_IS_GCC=n || GCC_VERSION >= 100100 ) && (CC_IS_GCC=n ) && ((FUNCTION_GRAPH_TRACE=n || DYNAMIC_FTRACE_WITH_ARG=y ))
+ select ARM64_SW_TTBR0_PAN
+ select CONFIG_UNMAP_KERNEL_AT_EL0
+ select GCC_PLUGIN_STACKLEAK
++ select KASAN_HW_TAGS if HAVE_ARCH_KASAN_HW_TAGS=y
++ select RANDOMIZE_BASE
++ select RELOCATABLE
++ select SHADOW_CALL_STACK if ARCH_SUPPORTS_SHADOW_CALL_STACK=y && (DYNAMIC_FTRACE_WITH_ARGS=y || DYNAMIC_FTRACE_WITH_REGS=y || FUNCTION_GRAPH_TRACER=n) && MMU=y
++ select UNWIND_PATCH_PAC_INTO_SCS if (CC_IS_CLANG=y && CLANG_VERSION >= CONFIG_150000 ) && ( ARM64_PTR_AUTH_KERNEL=y && CC_HAS_BRANCH_PROT_PAC_RET=y ) && ( SHADOW_CALL_STACK=y )
+ select VMAP_STACK
+
+config GENTOO_KERNEL_SELF_PROTECTION_X86_32
@@ -304,12 +319,6 @@
+ See the settings that become available for more details and fine-tuning.
+
+endmenu
-From bd3ff0b16792c18c0614c2b95e148943209f460a Mon Sep 17 00:00:00 2001
-From: Georgy Yakovlev <gyakovlev@gentoo.org>
-Date: Tue, 8 Jun 2021 13:59:57 -0700
-Subject: [PATCH 2/2] set DEFAULT_MMAP_MIN_ADDR by default
-
----
mm/Kconfig | 2 ++
1 file changed, 2 insertions(+)
next reply other threads:[~2024-05-05 17:54 UTC|newest]
Thread overview: 62+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-05-05 17:54 Mike Pagano [this message]
-- strict thread matches above, loose matches on Subject: below --
2024-04-27 22:02 [gentoo-commits] proj/linux-patches:master commit in: / Mike Pagano
2023-10-05 14:05 Mike Pagano
2023-05-09 12:35 Mike Pagano
2023-03-21 12:59 Mike Pagano
2022-08-25 17:37 Mike Pagano
2022-06-27 19:22 Mike Pagano
2022-05-11 17:40 Mike Pagano
2022-04-25 16:15 Mike Pagano
2022-04-12 19:12 Mike Pagano
2022-04-12 17:39 Mike Pagano
2022-01-29 20:44 Mike Pagano
2022-01-09 20:04 Mike Pagano
2022-01-04 12:53 Mike Pagano
2021-12-21 19:28 Mike Pagano
2021-12-05 23:36 Mike Pagano
2021-10-18 21:16 Mike Pagano
2021-09-20 21:58 Mike Pagano
2021-08-25 16:21 Mike Pagano
2021-08-24 19:54 Mike Pagano
2021-08-09 23:18 Mike Pagano
2021-08-03 22:50 Mike Pagano
2021-08-03 11:02 Mike Pagano
2021-08-02 22:29 Mike Pagano
2021-07-04 15:17 Mike Pagano
2021-06-11 13:24 Mike Pagano
2021-06-08 22:14 Mike Pagano
2021-06-08 20:08 Mike Pagano
2021-06-08 16:47 Mike Pagano
2021-06-08 15:37 Mike Pagano
2020-09-24 15:34 Mike Pagano
2020-09-24 15:17 Mike Pagano
2020-09-24 15:12 Mike Pagano
2020-05-13 11:57 Mike Pagano
2020-04-15 15:20 Mike Pagano
2019-12-30 22:24 Mike Pagano
2019-09-18 19:35 Mike Pagano
2019-08-07 12:39 Mike Pagano
2018-12-29 0:00 Mike Pagano
2018-09-28 12:15 Mike Pagano
2017-03-02 16:16 Mike Pagano
2017-02-18 20:36 Mike Pagano
2016-11-16 11:36 Mike Pagano
2016-11-07 0:09 Mike Pagano
2016-08-30 18:42 Mike Pagano
2016-07-01 23:48 Mike Pagano
2015-06-23 12:54 Mike Pagano
2015-06-23 12:54 Mike Pagano
2015-06-23 12:48 Mike Pagano
2015-06-23 12:48 Mike Pagano
2015-06-23 12:48 Mike Pagano
2015-06-20 17:36 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2015-06-06 22:03 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2015-05-17 19:55 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2015-05-14 12:22 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2015-05-07 19:37 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2015-05-07 19:14 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2015-05-03 23:55 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2015-04-29 17:33 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2015-03-21 20:00 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2015-03-18 23:27 [gentoo-commits] proj/linux-patches:4.0 " Mike Pagano
2015-06-23 12:48 ` [gentoo-commits] proj/linux-patches:master " Mike Pagano
2014-10-07 1:43 Anthony G. Basile
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1714931653.abbbd285be43f4a758e4cbaac9cf33c6bc74e32a.mpagano@gentoo \
--to=mpagano@gentoo.org \
--cc=gentoo-commits@lists.gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox