From: Alexander Popov Date: Wed, 4 Oct 2023 18:21:21 +0000 (+0300) Subject: Drop ZERO_CALL_USED_REGS in favour of backward-edge CFI X-Git-Tag: v0.6.6~70 X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=ea88558523b962cd25229699981f91b9a8c2087b;p=kconfig-hardened-check.git Drop ZERO_CALL_USED_REGS in favour of backward-edge CFI This option isn't worth the performance impact. Refers to #82. --- diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index de63c3e..e99d6a8 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -118,7 +118,6 @@ def add_kconfig_checks(l, arch): l += [KconfigCheck('self_protection', 'kspp', 'DEBUG_NOTIFIERS', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'INIT_ON_ALLOC_DEFAULT_ON', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'KFENCE', 'y')] - l += [KconfigCheck('self_protection', 'kspp', 'ZERO_CALL_USED_REGS', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'HW_RANDOM_TPM', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'STATIC_USERMODEHELPER', 'y')] # needs userspace support randstruct_is_set = OR(KconfigCheck('self_protection', 'kspp', 'RANDSTRUCT_FULL', 'y'),