This turns on HARDENED_USERCOPY with HARDENED_USERCOPY_PAGESPAN, and
FORTIFY_SOURCE.
It also enables SECURITY_LOCKDOWN_LSM with _EARLY and
LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY options enabled.
MODULE_SIG is selected by lockdown, so it is still enabled.
Signed-off-by: Joel Stanley
---
https://bugzilla.kernel.org/show_bug.cgi?id=206049
--- Comment #1 from Erhard F. (erhar...@mailbox.org) ---
Created attachment 286559
--> https://bugzilla.kernel.org/attachment.cgi?id=286559=edit
kernel .config (5.4.7, Talos II)
--
You are receiving this mail because:
You are watching the
https://bugzilla.kernel.org/show_bug.cgi?id=206049
Bug ID: 206049
Summary: alg: skcipher: p8_aes_xts encryption unexpectedly
succeeded on test vector "random: len=0 klen=64";
expected_error=-22, cfg="random: inplace may_sleep
Use resource_size rather than a verbose computation on
the end and start fields.
The semantic patch that makes these changes is as follows:
(http://coccinelle.lip6.fr/)
@@ struct resource ptr; @@
- (ptr.end - ptr.start + 1)
+ resource_size()
Signed-off-by: Julia Lawall
---
Use resource_size rather than a verbose computation on
the end and start fields.
The semantic patch that makes this change is as follows:
(http://coccinelle.lip6.fr/)
@@ struct resource ptr; @@
- (ptr.end - ptr.start + 1)
+ resource_size()
Signed-off-by: Julia Lawall
---
Use resource_size rather than a verbose computation on
the end and start fields.
The semantic patch that makes these changes is as follows:
(http://coccinelle.lip6.fr/)
@@
struct resource ptr;
@@
- ((ptr.end) - (ptr.start) + 1)
+ resource_size()
@@
struct resource *ptr;
@@
- ((ptr->end) -
The mpic_ipi_chip and mpic_irq_ht_chip structures are only copied
into other structures, so make them const.
The opportunity for this change was found using Coccinelle.
Signed-off-by: Julia Lawall
---
arch/powerpc/sysdev/mpic.c |4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
Make const static structures that are just copied into other structures.
The semantic patch that detects the opportunity for this change is as
follows: (http://coccinelle.lip6.fr/)
@r disable optional_qualifier@
identifier i,j;
position p;
@@
static struct i j@p = { ... };
@upd@
position p1;