Re: [PATCHv3 0/2] Hardening configs refactor/rename

[Kees Cook]

On Mon, Feb 6, 2017 at 4:31 PM, Laura Abbott  wrote:
> Hi,
>
> This is v3 of my series to rename/refactor CONFIG_DEBUG_RODATA
> and CONFIG_DEBUG_SET_MODULE_RONX. Among other objections, there shouldn't
> be 'debug' in the name since these provide necessary kernel protection.
>
> v3 mostly focuses on changing how the Kconfig dependencies work for the
> refactor. Russell King requested that these options be deselectable for arm.
> I also threw in some documentation on this under kernel hardening in case 
> other
> arches decide to follow suit.
>
> The plan is for this to go through the KSPP tree so if people are okay with
> this, please give Acks. I didn't take Mark Rutland's ack from before since
> there's been a bit of refactoring.

Thanks! I've added this to my KSPP -next tree. It should appear shortly...

-Kees

>
> Thanks,
> Laura
>
> Laura Abbott (2):
>   arch: Move CONFIG_DEBUG_RODATA and CONFIG_SET_MODULE_RONX to be common
>   arch: Rename CONFIG_DEBUG_RODATA and CONFIG_DEBUG_MODULE_RONX
>
>  Documentation/DocBook/kgdb.tmpl|  8 +++
>  Documentation/security/self-protection.txt | 10 +++--
>  arch/Kconfig   | 34 
> ++
>  arch/arm/Kconfig   |  4 
>  arch/arm/Kconfig.debug | 11 --
>  arch/arm/configs/aspeed_g4_defconfig   |  4 ++--
>  arch/arm/configs/aspeed_g5_defconfig   |  4 ++--
>  arch/arm/include/asm/cacheflush.h  |  2 +-
>  arch/arm/kernel/patch.c|  4 ++--
>  arch/arm/kernel/vmlinux.lds.S  |  8 +++
>  arch/arm/mm/Kconfig| 14 +---
>  arch/arm/mm/init.c |  4 ++--
>  arch/arm64/Kconfig |  5 ++---
>  arch/arm64/Kconfig.debug   | 13 +---
>  arch/arm64/kernel/insn.c   |  2 +-
>  arch/parisc/Kconfig|  1 +
>  arch/parisc/Kconfig.debug  | 11 --
>  arch/parisc/configs/712_defconfig  |  1 -
>  arch/parisc/configs/c3000_defconfig|  1 -
>  arch/parisc/mm/init.c  |  2 +-
>  arch/s390/Kconfig  |  5 ++---
>  arch/s390/Kconfig.debug|  3 ---
>  arch/x86/Kconfig   |  5 ++---
>  arch/x86/Kconfig.debug | 11 --
>  include/linux/filter.h |  4 ++--
>  include/linux/init.h   |  4 ++--
>  include/linux/module.h |  2 +-
>  init/main.c|  4 ++--
>  kernel/configs/android-recommended.config  |  2 +-
>  kernel/module.c|  6 +++---
>  kernel/power/hibernate.c   |  2 +-
>  kernel/power/power.h   |  4 ++--
>  kernel/power/snapshot.c|  4 ++--
>  33 files changed, 90 insertions(+), 109 deletions(-)
>
> --
> 2.7.4
>



-- 
Kees Cook
Pixel Security
--
To unsubscribe from this list: send the line "unsubscribe linux-doc" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[PATCHv3 0/2] Hardening configs refactor/rename

[Laura Abbott]

Hi,

This is v3 of my series to rename/refactor CONFIG_DEBUG_RODATA
and CONFIG_DEBUG_SET_MODULE_RONX. Among other objections, there shouldn't
be 'debug' in the name since these provide necessary kernel protection.

v3 mostly focuses on changing how the Kconfig dependencies work for the
refactor. Russell King requested that these options be deselectable for arm.
I also threw in some documentation on this under kernel hardening in case other
arches decide to follow suit.

The plan is for this to go through the KSPP tree so if people are okay with
this, please give Acks. I didn't take Mark Rutland's ack from before since
there's been a bit of refactoring.

Thanks,
Laura

Laura Abbott (2):
  arch: Move CONFIG_DEBUG_RODATA and CONFIG_SET_MODULE_RONX to be common
  arch: Rename CONFIG_DEBUG_RODATA and CONFIG_DEBUG_MODULE_RONX

 Documentation/DocBook/kgdb.tmpl|  8 +++
 Documentation/security/self-protection.txt | 10 +++--
 arch/Kconfig   | 34 ++
 arch/arm/Kconfig   |  4 
 arch/arm/Kconfig.debug | 11 --
 arch/arm/configs/aspeed_g4_defconfig   |  4 ++--
 arch/arm/configs/aspeed_g5_defconfig   |  4 ++--
 arch/arm/include/asm/cacheflush.h  |  2 +-
 arch/arm/kernel/patch.c|  4 ++--
 arch/arm/kernel/vmlinux.lds.S  |  8 +++
 arch/arm/mm/Kconfig| 14 +---
 arch/arm/mm/init.c |  4 ++--
 arch/arm64/Kconfig |  5 ++---
 arch/arm64/Kconfig.debug   | 13 +---
 arch/arm64/kernel/insn.c   |  2 +-
 arch/parisc/Kconfig|  1 +
 arch/parisc/Kconfig.debug  | 11 --
 arch/parisc/configs/712_defconfig  |  1 -
 arch/parisc/configs/c3000_defconfig|  1 -
 arch/parisc/mm/init.c  |  2 +-
 arch/s390/Kconfig  |  5 ++---
 arch/s390/Kconfig.debug|  3 ---
 arch/x86/Kconfig   |  5 ++---
 arch/x86/Kconfig.debug | 11 --
 include/linux/filter.h |  4 ++--
 include/linux/init.h   |  4 ++--
 include/linux/module.h |  2 +-
 init/main.c|  4 ++--
 kernel/configs/android-recommended.config  |  2 +-
 kernel/module.c|  6 +++---
 kernel/power/hibernate.c   |  2 +-
 kernel/power/power.h   |  4 ++--
 kernel/power/snapshot.c|  4 ++--
 33 files changed, 90 insertions(+), 109 deletions(-)

-- 
2.7.4

--
To unsubscribe from this list: send the line "unsubscribe linux-doc" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html