lkml.org 
[lkml]   [2018]   [Jun]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: [PATCH 06/10] x86/cet: Add arch_prctl functions for shadow stack
On Thu, Jun 7, 2018 at 7:41 AM Yu-cheng Yu <yu-cheng.yu@intel.com> wrote:
>
> The following operations are provided.
>
> ARCH_CET_STATUS:
> return the current CET status
>
> ARCH_CET_DISABLE:
> disable CET features
>
> ARCH_CET_LOCK:
> lock out CET features
>
> ARCH_CET_EXEC:
> set CET features for exec()
>
> ARCH_CET_ALLOC_SHSTK:
> allocate a new shadow stack
>
> ARCH_CET_PUSH_SHSTK:
> put a return address on shadow stack
>
> ARCH_CET_ALLOC_SHSTK and ARCH_CET_PUSH_SHSTK are intended only for
> the implementation of GLIBC ucontext related APIs.

Please document exactly what these all do and why. I don't understand
what purpose ARCH_CET_LOCK and ARCH_CET_EXEC serve. CET is opt in for
each ELF program, so I think there should be no need for a magic
override.

\
 
 \ /
  Last update: 2018-06-07 20:49    [W:0.343 / U:3.460 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site