Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752114AbbKJUep (ORCPT ); Tue, 10 Nov 2015 15:34:45 -0500 Received: from mail-io0-f171.google.com ([209.85.223.171]:35472 "EHLO mail-io0-f171.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751028AbbKJUeo (ORCPT ); Tue, 10 Nov 2015 15:34:44 -0500 MIME-Version: 1.0 In-Reply-To: <20151110063821.GA31014@infradead.org> References: <1447018493-20631-1-git-send-email-Julia.Lawall@lip6.fr> <20151108221624.GP18797@mwanda> <20151110063821.GA31014@infradead.org> Date: Tue, 10 Nov 2015 12:34:42 -0800 X-Google-Sender-Auth: bdkopP9BJzqLLrvprZdZAeUIiDI Message-ID: Subject: Re: [PATCH] video: constify geode ops structures From: Kees Cook To: Christoph Hellwig Cc: Dan Carpenter , Julia Lawall , Jean-Christophe Plagniol-Villard , kernel-janitors@vger.kernel.org, Tomi Valkeinen , linux-geode@lists.infradead.org, linux-fbdev@vger.kernel.org, LKML Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1773 Lines: 40 On Mon, Nov 9, 2015 at 10:38 PM, Christoph Hellwig wrote: > On Mon, Nov 09, 2015 at 01:20:12PM -0800, Kees Cook wrote: >> Just to remind everyone: while we certainly want to clean these up in >> the code where possible, we still want to make the constification >> plugin part of the regular builds. We want to provide a >> secure-by-default build, even when vendors are adding their own >> out-of-tree code when producing Linux-based products. So, we'll always >> want to have the plugin as a back-stop for out-of-tree code, or places >> where const was accidentally missed upstream. > > Who is 'we'? While a plugin like this that warns would be very ueful I understand "we" here to mean people interested in the proactive defense of the Linux kernel, and by extension the Linux kernel community as a whole. :) > I strongly disagree with bloating the kernel tree with any infrastructure > primarily aimed at out of tree code. It's not "primarily aimed at out of tree code", that is simply an additional side-effect (though the need must be recognized: a billion android devices, and none of them are running a stock kernel). What it gets us is _coverage_. We can't make everything work just by static analyzers and checkpatch.pl runs (meaning the "backstop" comment above). Additionally, having the plugin infrastructure gets us the ability to do things that aren't presently possible (see the thread on the initify plugin, which can't be done in source alone). -Kees -- Kees Cook Chrome OS Security -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/