Re: [RFC 17/17] arm64: compile the kernel with ptrauth -msign-return-address

2018-10-15 Thread Kees Cook
On Thu, Oct 11, 2018 at 7:23 AM, Vladimir Murzin wrote: > Hi Kristina, > > On 05/10/18 09:47, Kristina Martsenko wrote: >> diff --git a/arch/arm64/Makefile b/arch/arm64/Makefile >> index 106039d25e2f..dbcd43ea99d8 100644 >> --- a/arch/arm64/Makefile >> +++ b/arch/arm64/Makefile >> @@ -56,6 +56,10

Re: [RFC 17/17] arm64: compile the kernel with ptrauth -msign-return-address

2018-10-11 Thread Vladimir Murzin
Hi Kristina, On 05/10/18 09:47, Kristina Martsenko wrote: > diff --git a/arch/arm64/Makefile b/arch/arm64/Makefile > index 106039d25e2f..dbcd43ea99d8 100644 > --- a/arch/arm64/Makefile > +++ b/arch/arm64/Makefile > @@ -56,6 +56,10 @@ KBUILD_AFLAGS += $(lseinstr) $(brokengasinst) >

Re: [RFC 17/17] arm64: compile the kernel with ptrauth -msign-return-address

2018-10-11 Thread Kristina Martsenko
On 05/10/2018 10:01, Ramana Radhakrishnan wrote: > On 05/10/2018 09:47, Kristina Martsenko wrote: >> Compile all functions with two ptrauth instructions: paciasp in the >> prologue to sign the return address, and autiasp in the epilogue to >> authenticate the return address. This should help

[RFC 17/17] arm64: compile the kernel with ptrauth -msign-return-address

2018-10-05 Thread Kristina Martsenko
Compile all functions with two ptrauth instructions: paciasp in the prologue to sign the return address, and autiasp in the epilogue to authenticate the return address. This should help protect the kernel against attacks using return-oriented programming. CONFIG_ARM64_PTR_AUTH enables pointer