Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-19 Thread Nathan Chancellor
On Wed, Nov 18, 2020 at 03:24:04PM -0800, Nick Desaulniers wrote: > On Wed, Nov 18, 2020 at 3:07 PM Ard Biesheuvel wrote: > > > > On Thu, 19 Nov 2020 at 00:05, Nick Desaulniers > > wrote: > > > > > > > > > > > To avoid playing whack-a-mole with different architectures over > > > > > > > >

Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-18 Thread Nick Desaulniers
On Wed, Nov 18, 2020 at 3:07 PM Ard Biesheuvel wrote: > > On Thu, 19 Nov 2020 at 00:05, Nick Desaulniers > wrote: > > > > > > > > > To avoid playing whack-a-mole with different architectures over > > > > > > > time, > > > > > > > hoist '-z norelro' into the main Makefile. This does not affect

Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-18 Thread Ard Biesheuvel
On Thu, 19 Nov 2020 at 00:05, Nick Desaulniers wrote: > > On Fri, Nov 13, 2020 at 11:34 AM Nick Desaulniers > wrote: > > > > On Thu, Nov 12, 2020 at 10:06 PM Ard Biesheuvel wrote: > > > > > > On Fri, 13 Nov 2020 at 01:53, Nathan Chancellor > > > wrote: > > > > > > > > On Thu, Nov 12, 2020 at

Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-18 Thread Nick Desaulniers
On Fri, Nov 13, 2020 at 11:34 AM Nick Desaulniers wrote: > > On Thu, Nov 12, 2020 at 10:06 PM Ard Biesheuvel wrote: > > > > On Fri, 13 Nov 2020 at 01:53, Nathan Chancellor > > wrote: > > > > > > On Thu, Nov 12, 2020 at 04:44:46PM -0800, Nick Desaulniers wrote: > > > > On Thu, Nov 12, 2020 at

Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-17 Thread Linus Walleij
On Thu, Nov 12, 2020 at 7:41 PM Nathan Chancellor wrote: > Commit 3bbd3db86470 ("arm64: relocatable: fix inconsistencies in linker > script and options") added '-z norelro' to the arm64 Makefile when > CONFIG_RELOCATABLE was set to help support ld.lld because ld.lld > defaults to '-z relro' but

Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-16 Thread Catalin Marinas
On Thu, Nov 12, 2020 at 11:38:40AM -0700, Nathan Chancellor wrote: > Commit 3bbd3db86470 ("arm64: relocatable: fix inconsistencies in linker > script and options") added '-z norelro' to the arm64 Makefile when > CONFIG_RELOCATABLE was set to help support ld.lld because ld.lld > defaults to '-z

Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-13 Thread Nick Desaulniers
On Thu, Nov 12, 2020 at 10:06 PM Ard Biesheuvel wrote: > > On Fri, 13 Nov 2020 at 01:53, Nathan Chancellor > wrote: > > > > On Thu, Nov 12, 2020 at 04:44:46PM -0800, Nick Desaulniers wrote: > > > On Thu, Nov 12, 2020 at 10:41 AM Nathan Chancellor > > > wrote: > > > > > > > > Commit 3bbd3db86470

Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-12 Thread Ard Biesheuvel
On Fri, 13 Nov 2020 at 01:53, Nathan Chancellor wrote: > > On Thu, Nov 12, 2020 at 04:44:46PM -0800, Nick Desaulniers wrote: > > On Thu, Nov 12, 2020 at 10:41 AM Nathan Chancellor > > wrote: > > > > > > Commit 3bbd3db86470 ("arm64: relocatable: fix inconsistencies in linker > > > script and

Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-12 Thread Nathan Chancellor
On Thu, Nov 12, 2020 at 04:44:46PM -0800, Nick Desaulniers wrote: > On Thu, Nov 12, 2020 at 10:41 AM Nathan Chancellor > wrote: > > > > Commit 3bbd3db86470 ("arm64: relocatable: fix inconsistencies in linker > > script and options") added '-z norelro' to the arm64 Makefile when > >

Re: [PATCH] kbuild: Always link with '-z norelro'

2020-11-12 Thread Nick Desaulniers
On Thu, Nov 12, 2020 at 10:41 AM Nathan Chancellor wrote: > > Commit 3bbd3db86470 ("arm64: relocatable: fix inconsistencies in linker > script and options") added '-z norelro' to the arm64 Makefile when > CONFIG_RELOCATABLE was set to help support ld.lld because ld.lld > defaults to '-z relro'

[PATCH] kbuild: Always link with '-z norelro'

2020-11-12 Thread Nathan Chancellor
Commit 3bbd3db86470 ("arm64: relocatable: fix inconsistencies in linker script and options") added '-z norelro' to the arm64 Makefile when CONFIG_RELOCATABLE was set to help support ld.lld because ld.lld defaults to '-z relro' but the kernel does not use program headers or adhere to the section