Re: [OS-BUILD PATCHv2] redhat/configs: Enable CONFIG_INIT_STACK_ALL_ZERO for RHEL

2023-06-14 Thread Prarit Bhargava (via Email Bridge)
From: Prarit Bhargava on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2400#note_1430924962 @prauld, can you offer a review here? ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to

Re: [OS-BUILD PATCHv2] redhat/configs: Enable CONFIG_INIT_STACK_ALL_ZERO for RHEL

2023-04-26 Thread Patrick Talbert (via Email Bridge)
From: Patrick Talbert on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2400#note_1368756510 @prarit @darcari do either of you have opinions on this, or know who would? ___ kernel mailing list -- kernel@lists.fedoraproject.org To

[OS-BUILD PATCHv2] redhat/configs: Enable CONFIG_INIT_STACK_ALL_ZERO for RHEL

2023-04-25 Thread Josh Poimboeuf (via Email Bridge)
From: Josh Poimboeuf redhat/configs: Enable CONFIG_INIT_STACK_ALL_ZERO for RHEL CONFIG_INIT_STACK_ALL_ZERO is a hardening feature which is "intended to eliminate all classes of uninitialized stack variable exploits and information exposures." Recent internal benchmark testing has shown