From: Alexander Popov Date: Mon, 5 Jun 2023 20:48:34 +0000 (+0300) Subject: Skip normalize_cmdline_options() for the rodata cmdline parameter X-Git-Tag: v0.6.6~149 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=4dd0d2f9cf055b4c8f525776adbca546d3405d66;p=kconfig-hardened-check.git Skip normalize_cmdline_options() for the rodata cmdline parameter Also fix the rodata check (change '1' to 'on'). See set_debug_rodata() in init/main.c. --- diff --git a/kconfig_hardened_check/checks.py b/kconfig_hardened_check/checks.py index b83be11..87e45c9 100644 --- a/kconfig_hardened_check/checks.py +++ b/kconfig_hardened_check/checks.py @@ -490,7 +490,7 @@ def add_cmdline_checks(l, arch): AND(KconfigCheck('self_protection', 'defconfig', 'RODATA_FULL_DEFAULT_ENABLED', 'y'), CmdlineCheck('self_protection', 'defconfig', 'rodata', 'is not set')))] else: - l += [OR(CmdlineCheck('self_protection', 'defconfig', 'rodata', '1'), + l += [OR(CmdlineCheck('self_protection', 'defconfig', 'rodata', 'on'), CmdlineCheck('self_protection', 'defconfig', 'rodata', 'is not set'))] # 'self_protection', 'kspp' @@ -588,6 +588,7 @@ no_kstrtobool_options = [ 'srbds', # See srbds_parse_cmdline() in arch/x86/kernel/cpu/bugs.c 'mmio_stale_data', # See mmio_stale_data_parse_cmdline() in arch/x86/kernel/cpu/bugs.c 'retbleed', # See retbleed_parse_cmdline() in arch/x86/kernel/cpu/bugs.c + 'rodata', # See set_debug_rodata() in init/main.c 'ssbd', # See parse_spectre_v4_param() in arch/arm64/kernel/proton-pack.c 'tsx' # See tsx_init() in arch/x86/kernel/cpu/tsx.c ]