[lkml]   [2018]   [Jan]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRE: [PATCH] retpoline/module: Taint kernel for missing retpoline in module
> > When the a module hasn't been compiled with a retpoline
> > aware compiler, print a warning and set a taint flag.
> Isn't that caught by the "build with a different compiler/version" check
> that we have? Or used to have? If not, can't we just make it into that
> type of check to catch this type of problem no matter what type of
> feature/option it is trying to catch?

making retpoline part of the modversion hash thingy could make sense.

but I kinda feel this is a bit overkill; it's not a function issue if you get this wrong, and if you run an ancient or weird out of tree module there's a real chance you have
other security fun as well ;-)

 \ /
  Last update: 2018-01-14 23:26    [W:0.121 / U:7.792 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site