Received: by 2002:a6b:500f:0:0:0:0:0 with SMTP id e15csp3270930iob; Mon, 16 May 2022 17:45:35 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxctiI3qJ01sOftITxbwX990m7Pq8aEbqqU08K9BJSA6Je1Y1GisR/G24UtgEkB1Wyr1I70 X-Received: by 2002:a17:902:d716:b0:15f:179c:9817 with SMTP id w22-20020a170902d71600b0015f179c9817mr19712391ply.150.1652748335379; Mon, 16 May 2022 17:45:35 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1652748335; cv=none; d=google.com; s=arc-20160816; b=UiTp6+jdqAokRfL2bnIJhYODVsyh5ns6Wrp8nZV81Oxwz95HydJbzbQC9BT/tDtGng 9r0Q/ncINn6GznQYZ4HKyxP6droBEJxm2mUJXon1w6XdICbk4VX8CuozXZu/IQUb5nQ+ 9LXetXXmgWz/4Q40WEr7rLAWMljGorUTUHd3+JKIaYfshZsyXSngfFsovyBC6ebdzKHo aKLELghtD2QKKpo1Zt/63k73JG0Ns/3XhNO1bkPYAytzTdORNMHUkJ1oR/VFrJ9MSYX7 xNyubQ0CCsH6ZFG1pl4Poz5Q7Ff3xzmq4tfcZh3bui7mQfaUGe8zAqAVBdub1CxJ9Hoa K5xg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=gh4thbZicieh5pA9EvCDqIWgLAD7rreDAsKJIQexD5c=; b=vl6Om6f7HGZVe1aUBVs3kQ7m/Gp8mLvhKQOdHnKWl7iQkeMb2Vxn+T5t6YsNHq/7EU 4ILWw493ELhqL24vD9NdnsN5Y8pRXBdYuibcToHORQ9F5TctjisR2tiD2W/COcbZAIa1 CNNQUDv9hto12qkxyiKonpwgfWuiXHgvNWrMZ1N1lWV2BjbyI1+sAwkBeDwCfm+v3GeJ UWmFB2DCzfDLCLIJak8ojiJRoUp6AMHWGIUNknWWXIbaXSuGcnkwjWGu5Jdutt/rbo7g 1+cBl7GfKNEnTanLWVSI6HBBH8CD9dh+dEX834yf7E1PlfNmswez6x9hvbSdqb86RPIA 3iwg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=NAoEVeLy; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id r23-20020a635157000000b003db58036fb2si4959162pgl.755.2022.05.16.17.45.24; Mon, 16 May 2022 17:45:35 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20210112 header.b=NAoEVeLy; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S244216AbiEPPpA (ORCPT + 99 others); Mon, 16 May 2022 11:45:00 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:57526 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231156AbiEPPo6 (ORCPT ); Mon, 16 May 2022 11:44:58 -0400 Received: from mail-yb1-xb34.google.com (mail-yb1-xb34.google.com [IPv6:2607:f8b0:4864:20::b34]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 2436B27CC2 for ; Mon, 16 May 2022 08:44:57 -0700 (PDT) Received: by mail-yb1-xb34.google.com with SMTP id r1so27700341ybo.7 for ; Mon, 16 May 2022 08:44:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=gh4thbZicieh5pA9EvCDqIWgLAD7rreDAsKJIQexD5c=; b=NAoEVeLyn9HY8sQK4KikjOwjCyegVnBTeL5zoWuK82YfpVeeInRkemfpzAO6Hr7SSx rREBMz9IyEZgBDaS/b2j7V35XSafSQUxzdT3PPKnWgbj3uFgbhsyyuSoFDFWDwqcvqua nCQLyT0v46hhy1pE4trJySbGaEWVSGPA/k0jpZvgChCHIb6+zlcaQL0dSmM7PaXvlkfz TTFRbsF8RVb15dpwhIDsgTD//g1y2accfif7dNoz991SFFzDD4UmDRuoVyUnBQIzDz9e dkRhMg5PSDInh8OuDu+jriCSbDtLVRXI8Uxt5OUZqSYXUmofr4ZAtRVMo3AWfs2L+qs6 SgQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=gh4thbZicieh5pA9EvCDqIWgLAD7rreDAsKJIQexD5c=; b=CV4LWiifaPb8qvJyXcan0N56ug6LSJtlDKL5re3rv3oaczAm0NmaAbWxvrzTXXQ9C2 cYaSAp8NYjHPZcN5GkVUFmTlATYjMMguCnp7CqeIO2dbHxaDOKA1T4kBP46GBkkEbBpz 3i0G4VC8xh9qQhJCWRt7h8galVyF/6Xv0Fb4sD9kTGiGk44NJYIjCuNv2e6ghOVILDPE teFPiAw2hVtNrXYI23fi+gH+H3cDeqFgqVj18748p7Uv8/WzeDY303ggRWNR7Gd1zGiF B0nBQb57GHul5cEQVfyMwNsvtOTsPZ8W47IUKAKbpAiA4ILkIiaeSHKbMf/miMw5f/Wz uVyA== X-Gm-Message-State: AOAM530M/wyCSx0y5mXxySs1lqvzKQmLBqtEIkqxgn0A4PibBxtTWCOB vH+BebncGjDr0+e2wpXOfcIk2TRmjY3SZwNFWwYRbw== X-Received: by 2002:a05:6902:90b:b0:64b:233d:8e03 with SMTP id bu11-20020a056902090b00b0064b233d8e03mr17872541ybb.428.1652715896186; Mon, 16 May 2022 08:44:56 -0700 (PDT) MIME-Version: 1.0 References: <20220513202159.1550547-1-samitolvanen@google.com> <20220513202159.1550547-2-samitolvanen@google.com> <202205141441.C3B7CF6@keescook> In-Reply-To: <202205141441.C3B7CF6@keescook> From: Sami Tolvanen Date: Mon, 16 May 2022 08:44:20 -0700 Message-ID: Subject: Re: [RFC PATCH v2 01/21] efi/libstub: Filter out CC_FLAGS_CFI To: Kees Cook Cc: linux-kernel@vger.kernel.org, Josh Poimboeuf , Peter Zijlstra , x86@kernel.org, Catalin Marinas , Will Deacon , Mark Rutland , Nathan Chancellor , Nick Desaulniers , Joao Moreira , Sedat Dilek , Steven Rostedt , linux-hardening@vger.kernel.org, linux-arm-kernel@lists.infradead.org, llvm@lists.linux.dev Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-17.6 required=5.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF, ENV_AND_HDR_SPF_MATCH,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE,USER_IN_DEF_DKIM_WL,USER_IN_DEF_SPF_WL autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, May 14, 2022 at 2:42 PM Kees Cook wrote: > > On Fri, May 13, 2022 at 01:21:39PM -0700, Sami Tolvanen wrote: > > Explicitly filter out CC_FLAGS_CFI in preparation for the flags being > > removed from CC_FLAGS_LTO. > > > > Signed-off-by: Sami Tolvanen > > Is it worth merging all the "existing" CC_FLAGS_LTO/CFI splits into a > single patch? Either way: Sure, I can merge them in the next version. Sami