Received: by 10.223.185.116 with SMTP id b49csp1381381wrg; Sun, 11 Feb 2018 10:36:42 -0800 (PST) X-Google-Smtp-Source: AH8x225JL+vg8rZLD3poJh1zl1Ufjylekai+NPexsqKLv8ooPViw/Ttv3R7dkuCTjTSePt9BqI3V X-Received: by 2002:a17:902:7445:: with SMTP id e5-v6mr7176674plt.204.1518374202712; Sun, 11 Feb 2018 10:36:42 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1518374202; cv=none; d=google.com; s=arc-20160816; b=hib5CwtET1J9cQe3Tw93igQsYAID1b2yj0T/sLBrRIJxZlAiMVjSXjTur6kjj91sMh 4hXmqIwSiw+UoL/LHRdhrmnmxX5KoatF1SWLR6X09KEveKyXdyh8n9jse7sUivVx1omO /iCdFcBYwwMrVcxCPwH0F/Q5QXs7na6qYnCslUqD5pNgMsr8nklRxvRdHP7bSLkS1rmD R6wJfM8fXEMcPeeJP7nqhrXz83QSalRY6TnUB4S5PP4pxL351iwWjYZAsLZ3WcC1+wIk HF/VXMWsQ9ZvTPTJtUtup9j4pyXhn1/d6g1aVugqeSznQ9S2Py2pnofT0e1hicVZbh2r bGag== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :references:in-reply-to:mime-version:dkim-signature :arc-authentication-results; bh=boCiq4DcbqezdPoJlFPNANUX+d6g01FLBgm63P1qtR4=; b=hXUbGJfP6W4SVX2F3OVN+q1EMjLAJaKmcJWKxifHI29Gu0FiM7EElCmy30eROzlkcQ CIpwgUs8YU8dEJjaJ2nQXrM7Tu/pzglcGRMhxHOBpfyfxtXBiyiBxty8AhxfhWeOaPRF 3h0nWm9tQJlt8olRUkQOdao0XAmh8oqP2cJ9nwoy4YPd/0iQnZTfdScHJwXBe4FTPEcT YEuH4UHBouH1alBHFBtAPp4WPrVRJfOnZYPsP8PInjJXJhHhbN1pOFE7Lmcg85U8sOx0 dEnQaipo1Z8OrwKVfCy4z24eHqOrrBjBlk8kFzVaqlfZGmX8X6LtGkXp06lWB2xmajfv W/pg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=cRn4FWCJ; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id v10si4248000pgf.214.2018.02.11.10.36.28; Sun, 11 Feb 2018 10:36:42 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=cRn4FWCJ; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753615AbeBKSei (ORCPT + 99 others); Sun, 11 Feb 2018 13:34:38 -0500 Received: from mail-vk0-f43.google.com ([209.85.213.43]:46358 "EHLO mail-vk0-f43.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753551AbeBKSef (ORCPT ); Sun, 11 Feb 2018 13:34:35 -0500 Received: by mail-vk0-f43.google.com with SMTP id e125so7664165vkh.13; Sun, 11 Feb 2018 10:34:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=boCiq4DcbqezdPoJlFPNANUX+d6g01FLBgm63P1qtR4=; b=cRn4FWCJfbbu7hN0lIMCX/flx7HErMFPzHb/93rXZjESAsoMOZHyAmykza5P4ZplPb 36A/naGw7Go5ENjJ56aomhVXuDnAn95VtkZ8pjmWGwpnL6m6CZeFQl02Oy0VN+z31Qgo eIXnyK8lvm9ErJZSj8OyqfoHQsoStvyqIiAwPqXb/zZsCN47Zflia+7vz0axXWoMqtvt 6NrepVJOwo/hXU/ADvt47IJeFBdqWXpT3y11a0Ns9AVsXOl+319+J7cWz1W/lfuMb544 8AZJrwKbApz56ZoQUDPo9xXaThlfVzbwufNWDrbGCY4xMPC0eKApqpc/bw/KlXr9OwMy btLQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=boCiq4DcbqezdPoJlFPNANUX+d6g01FLBgm63P1qtR4=; b=HdMrYJi3N3oqq+8SmEVBOqBH8E9zDfRmaBdy9A9R+cdgbh5HO/VuM1dC3Ybudlqq9e OiwIn+IfJT9JfCqTILxEfNnTBkbytLgrXVGsYY0qB+0kYhj40frlcNCsDj/J7KvXF/P+ xiPF/MuZGSZw2nqGaBd5OD8/s4RGDtP3rbWyeWd2O7mkaGu7fqQevX0l3YJiYkshmUXh GbprO5HqLUbUgZkGl5Gez6Kld28l10kTOLPqGr5fIE0YZRQWC+ukJuuDDGzPybi30XGI j2coT8m2EipqqhvnpchPS4z/Yi9iNWwdT4TyOmfgoIFzwlWmK7DUT6fBj4OziNPHF4LX 6qZg== X-Gm-Message-State: APf1xPDLv//o/xd3T53r/Y+XrjbRX2qlrh7hNQzzvtm7xz9aqya1jNR6 tGztbogcudw422Hghgp5J6d3Vj6Xp/yTkeNxF6c= X-Received: by 10.31.15.149 with SMTP id 143mr8515486vkp.126.1518374074736; Sun, 11 Feb 2018 10:34:34 -0800 (PST) MIME-Version: 1.0 Received: by 10.103.70.21 with HTTP; Sun, 11 Feb 2018 10:34:34 -0800 (PST) In-Reply-To: References: <20180210054843.z3g7wvcmlccvww3h@huvuddator> <20180210074924.3nhxsza5zdbaahxx@huvuddator> <20180210080556.mycqsjhxbaguwhay@huvuddator> <20180210085519.737ckf4bcl57h4g2@huvuddator> <20180211103432.pf2ot6nd7nbhdhsy@huvuddator> From: Ulf Magnusson Date: Sun, 11 Feb 2018 19:34:34 +0100 Message-ID: Subject: Re: [RFC PATCH 4/7] kconfig: support new special property shell= To: Kees Cook Cc: Linus Torvalds , Masahiro Yamada , Linux Kbuild mailing list , Greg Kroah-Hartman , Andrew Morton , Nicolas Pitre , "Luis R . Rodriguez" , Randy Dunlap , Sam Ravnborg , Michal Marek , Martin Schwidefsky , Pavel Machek , linux-s390 , Jiri Kosina , Linux Kernel Mailing List , Tejun Heo , Ingo Molnar , "Van De Ven, Arjan" , Arnd Bergmann Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Feb 11, 2018 at 6:56 PM, Kees Cook wrote: > Old? That's not the case. The check for -fno-stack-protector will > likely be needed forever, as some distro compilers enable > stack-protector by default. So when someone wants to explicitly build > without stack-protector (or if the compiler's stack-protector is > detected as broken), we must force it off for the kernel build. What I meant is whether it makes sense to test if the -fno-stack-protector option is supported. Can we reasonably assume that passing -fno-stack-protector to the compiler won't cause an error? Is it possible to build GCC with no "no stack protector" support? Do we need to support any compilers that would choke on the -fno-stack-protector flag itself? If we can reasonably assume that passing -fno-stack-protector is safe, then CC_HAS_STACKPROTECTOR_NONE isn't needed. Cheers, Ulf