Re: [GIT PULL 2/4] KVM: s390: obey kptr_restrict in traces

2015-12-15 Thread Kees Cook
On Tue, Dec 15, 2015 at 11:23 AM, Christian Borntraeger wrote: > The s390dbf and trace events provide a debugfs interface. > If kptr_restrict is active, we should not expose kernel > pointers. We can fence the debugfs output by using %pK > instead of %p. > > Cc: Kees Cook >

[PATCH] vfio: platform: remove needless stack usage

2015-11-19 Thread Kees Cook
request_module already takes format strings, so no need to duplicate the effort. Signed-off-by: Kees Cook --- drivers/vfio/platform/vfio_platform_common.c | 5 + 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/drivers/vfio/platform/vfio_platform_common.c b/drivers/vfio

Re: [PATCH v4 5/5] x86,kaslr: Use MSR_KVM_GET_RNG_SEED for KASLR if available

2014-07-17 Thread Kees Cook
with boot/cpuflags.c's cpuid implementation: > including asm/processor.h from boot/cpuflags.c results in a flood of > unrelated errors, and fixing it might be messy. > > Signed-off-by: Andy Lutomirski This will be very nice to have under kvm! Reviewed-by: Kees Cook Thanks, -Kees -- K

[PATCH] drivers/vfio: remove depends on CONFIG_EXPERIMENTAL

2013-02-22 Thread Kees Cook
The CONFIG_EXPERIMENTAL config item has not carried much meaning for a while now and is almost always enabled by default. As agreed during the Linux kernel summit, remove it from any "depends on" lines in Kconfigs. Signed-off-by: Kees Cook Cc: Alex Williamson --- drivers/vfio/p

[PATCH] drivers/vhost: remove depends on CONFIG_EXPERIMENTAL

2013-02-22 Thread Kees Cook
The CONFIG_EXPERIMENTAL config item has not carried much meaning for a while now and is almost always enabled by default. As agreed during the Linux kernel summit, remove it from any "depends on" lines in Kconfigs. Signed-off-by: Kees Cook Cc: David S. Miller Cc: Asias He Cc: