Re: [OS-BUILD PATCHv2 0/6] Enable hardened configs for Fedora and ARK

2021-03-24 Thread Augusto Caringi (via Email Bridge)
From: Augusto Caringi on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/961#note_537052073 @jpoimboe I agree with you, my mistake. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le.

Re: [OS-BUILD PATCHv2 0/6] Enable hardened configs for Fedora and ARK

2021-03-24 Thread Josh Poimboeuf (via Email Bridge)
From: Josh Poimboeuf on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/961#note_536920780 Thanks for the merge. It looks like the commits were squashed into a single commit? It would have been better to preserve the individual changes. _

Re: [OS-BUILD PATCHv2 0/6] Enable hardened configs for Fedora and ARK

2021-03-16 Thread Waiman Long (via Email Bridge)
From: Waiman Long on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/961#note_530990147 The patchset looks good to me. Of the four config options, PAGE_POISONING is the one that definitely has performance impact. Since page poisoning is an opt-in at boot time, there should be

Re: [OS-BUILD PATCHv2 0/6] Enable hardened configs for Fedora and ARK

2021-03-10 Thread Josh Poimboeuf (via Email Bridge)
From: Josh Poimboeuf on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/961#note_526387406 Linus and Kees have acknowledged it's a valid problem, so I'm thinking we'll get it fixed relatively soon. ___ kernel mailing list -- kernel@

Re: [OS-BUILD PATCHv2 0/6] Enable hardened configs for Fedora and ARK

2021-03-10 Thread Justin Forbes (via Email Bridge)
From: Justin Forbes on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/961#note_526354022 Thanks, for what it is worth, I think there is value in enabling them, but watching the upstream conversation, I am not convinced that we will get a practical solution in the near term.

Re: [OS-BUILD PATCHv2 0/6] Enable hardened configs for Fedora and ARK

2021-03-10 Thread Josh Poimboeuf (via Email Bridge)
From: Josh Poimboeuf on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/961#note_526313989 Removed the stackleak plugin from the bunch, and reverted the previous structleak plugin. ___ kernel mailing list -- kernel@lists.fedoraproje

[OS-BUILD PATCHv2 0/6] Enable hardened configs for Fedora and ARK

2021-03-10 Thread Josh Poimboeuf (via Email Bridge)
From: Josh Poimboeuf on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/961 Improve Fedora and ARK kernel hardening by enabling the following configs: CONFIG_GCC_PLUGIN_STACKLEAK CONFIG_SCHED_STACK_END_CHECK CONFIG_BUG_ON_DATA_CORRUPTION CONFIG_SLAB_FREELIST_H