From ea88558523b962cd25229699981f91b9a8c2087b Mon Sep 17 00:00:00 2001 From: Alexander Popov Date: Wed, 4 Oct 2023 21:21:21 +0300 Subject: [PATCH] Drop ZERO_CALL_USED_REGS in favour of backward-edge CFI This option isn't worth the performance impact. Refers to #82. --- kernel_hardening_checker/checks.py | 1 - 1 file changed, 1 deletion(-) diff --git a/kernel_hardening_checker/checks.py b/kernel_hardening_checker/checks.py index de63c3e..e99d6a8 100644 --- a/kernel_hardening_checker/checks.py +++ b/kernel_hardening_checker/checks.py @@ -118,7 +118,6 @@ def add_kconfig_checks(l, arch): l += [KconfigCheck('self_protection', 'kspp', 'DEBUG_NOTIFIERS', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'INIT_ON_ALLOC_DEFAULT_ON', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'KFENCE', 'y')] - l += [KconfigCheck('self_protection', 'kspp', 'ZERO_CALL_USED_REGS', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'HW_RANDOM_TPM', 'y')] l += [KconfigCheck('self_protection', 'kspp', 'STATIC_USERMODEHELPER', 'y')] # needs userspace support randstruct_is_set = OR(KconfigCheck('self_protection', 'kspp', 'RANDSTRUCT_FULL', 'y'), -- 2.31.1