Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1562361 > unrolled thread
| Started by | Laura Abbott <labbott@redhat.com> |
|---|---|
| First post | 2017-01-19 02:40 +0100 |
| Last post | 2017-01-19 23:10 +0100 |
| Articles | 2 — 2 participants |
Back to article view | Back to linux.kernel
[RFC][PATCH 0/2] Better hardening names Laura Abbott <labbott@redhat.com> - 2017-01-19 02:40 +0100
Re: [RFC][PATCH 0/2] Better hardening names Kees Cook <keescook@chromium.org> - 2017-01-19 23:10 +0100
| From | Laura Abbott <labbott@redhat.com> |
|---|---|
| Date | 2017-01-19 02:40 +0100 |
| Subject | [RFC][PATCH 0/2] Better hardening names |
| Message-ID | <t19RM-3iT-5@gated-at.bofh.it> |
Hi, It's come up previously that CONFIG_DEBUG_SET_MODULE_RONX and CONFIG_DEBUG_RODATA are not accurate names, mostly they should not have the word 'debug' in them. This series attempts to change the names to something a bit more descriptive and indicative of what they are actually used for these days. I marked this RFC for - Bike shedding purposes. - A discussion of what defaults should be. The way I did the refactoring, both options are default y. I'd appreciate comments if there is a better approach. - Approach to split this up into more sub patches to make review/merging easier? Or maybe it's fine. Quickly tested on arm/arm64/x86. Thanks, Laura Laura Abbott (2): security: Change name of CONFIG_DEBUG_RODATA security: Change name of CONFIG_DEBUG_SET_MODULE_RONX Documentation/DocBook/kgdb.tmpl | 8 ++++---- Documentation/security/self-protection.txt | 4 ++-- arch/arm/Kconfig | 2 ++ arch/arm/Kconfig.debug | 11 ---------- arch/arm/configs/aspeed_g4_defconfig | 4 ++-- arch/arm/configs/aspeed_g5_defconfig | 4 ++-- arch/arm/include/asm/cacheflush.h | 2 +- arch/arm/kernel/patch.c | 4 ++-- arch/arm/kernel/vmlinux.lds.S | 8 ++++---- arch/arm/mm/Kconfig | 14 +------------ arch/arm/mm/init.c | 4 ++-- arch/arm64/Kconfig | 5 ++--- arch/arm64/Kconfig.debug | 13 +----------- arch/arm64/kernel/insn.c | 2 +- arch/parisc/Kconfig | 1 + arch/parisc/Kconfig.debug | 11 ---------- arch/parisc/configs/712_defconfig | 2 +- arch/parisc/configs/c3000_defconfig | 2 +- arch/parisc/mm/init.c | 2 +- arch/s390/Kconfig | 5 ++--- arch/s390/Kconfig.debug | 3 --- arch/x86/Kconfig | 5 ++--- arch/x86/Kconfig.debug | 11 ---------- include/linux/filter.h | 4 ++-- include/linux/init.h | 4 ++-- include/linux/module.h | 2 +- init/main.c | 4 ++-- kernel/configs/android-recommended.config | 2 +- kernel/module.c | 6 +++--- kernel/power/hibernate.c | 2 +- kernel/power/power.h | 4 ++-- kernel/power/snapshot.c | 4 ++-- security/Kconfig | 32 ++++++++++++++++++++++++++++++ 33 files changed, 82 insertions(+), 109 deletions(-) -- 2.7.4
[toc] | [next] | [standalone]
| From | Kees Cook <keescook@chromium.org> |
|---|---|
| Date | 2017-01-19 23:10 +0100 |
| Message-ID | <t1t45-7iz-13@gated-at.bofh.it> |
| In reply to | #1562361 |
On Wed, Jan 18, 2017 at 5:29 PM, Laura Abbott <labbott@redhat.com> wrote: > Hi, > > It's come up previously that CONFIG_DEBUG_SET_MODULE_RONX and > CONFIG_DEBUG_RODATA are not accurate names, mostly they should not have the > word 'debug' in them. This series attempts to change the names to something > a bit more descriptive and indicative of what they are actually used for these > days. > > I marked this RFC for > - Bike shedding purposes. > - A discussion of what defaults should be. The way I did the refactoring, both > options are default y. I'd appreciate comments if there is a better approach. > - Approach to split this up into more sub patches to make review/merging easier? > Or maybe it's fine. > > Quickly tested on arm/arm64/x86. > > Thanks, > Laura > > Laura Abbott (2): > security: Change name of CONFIG_DEBUG_RODATA > security: Change name of CONFIG_DEBUG_SET_MODULE_RONX Some day I'll quit reading my email backwards. :) I see you've got MODULE_RONX renamed too here, please ignore my comment about needing it "too". :) -Kees -- Kees Cook Nexus Security
[toc] | [prev] | [standalone]
Back to top | Article view | linux.kernel
csiph-web