Received: by 2002:a05:6359:c8b:b0:c7:702f:21d4 with SMTP id go11csp3342638rwb; Mon, 3 Oct 2022 13:28:46 -0700 (PDT) X-Google-Smtp-Source: AMsMyM7yVLEpkRACwDyqsbmlhqlfVpB2vKiRKoEhPaEiEcWvhj7eWmvKESvB+FEfEYlMb5/OTTOF X-Received: by 2002:a17:902:ea02:b0:176:afd7:3d1d with SMTP id s2-20020a170902ea0200b00176afd73d1dmr24139549plg.120.1664828926114; Mon, 03 Oct 2022 13:28:46 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1664828926; cv=none; d=google.com; s=arc-20160816; b=ck9gnUgFbnJMW5gkRs9yvVRCd80y2/E2W28suFn5L02vn49hA1raQxZN01sLZpW3ma 5piRhDKeio/oS+Qibu6vrMSjVe+Jvgcy24baADvGlKr12UUzuN2MFCpzisk4nCK4AHVh hkQpUvFEYhP89sndeqOCdVVw9+qdTLeVPUxGW1jj6wDLmQoqW53Q4K4+johDKcDG5xay 81FZow5by/vBM14Pa6ItihfWiWia7h4+N6qqqasfdse6Wq+YOlDsCwz1EW5diQlBA3cc 5kUrZqUJHg2zTZpLs5g731fuP10OLySpvlYkzm9pWoFj1jGnZoh1qQUBJ76xJ4H2TLfJ N0ew== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:in-reply-to:from :references:cc:to:content-language:subject:user-agent:mime-version :date:message-id:dkim-signature; bh=ggq3ZuHS+B2BZYqL5QvHoHhzwU6VDrYoawc9smLGYSo=; b=scoa5fW0YsopTmqyFAuDvgSAo3keFIsF0zx56gpm87tF/BNWCiiAvNa9CbDUzBZGNK /05JtR0divcSV/RSTa0gKXJbHGabJ1nrpoUHrLqssjogKr8bDTtQ1+Qf6GYpgvSMzn8g WHiWhNieISJQt2/9AlKNdRbn1N7JmSbU/EpqB43KYuXHEH0sMOEBw2XH2QwBlKfI56Hx c64fXqZDjt0nETZLRbb4fnbGtMsMJzAThhH99INTqebOM+ddaiq8jxfmdVcFquhGV3ns GhbtsXp3gaO7pbGlgZdBrPhzKatyR2c+3kjtYLVPuURkPhwVpRUxEyX8ehRQBEVpuKXt PuEw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=dmNDLpD0; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id cr10-20020a056a000f0a00b00543369ca97esi5742131pfb.160.2022.10.03.13.28.33; Mon, 03 Oct 2022 13:28:46 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=dmNDLpD0; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229648AbiJCTmV (ORCPT + 99 others); Mon, 3 Oct 2022 15:42:21 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:34338 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229484AbiJCTmT (ORCPT ); Mon, 3 Oct 2022 15:42:19 -0400 Received: from mga17.intel.com (mga17.intel.com [192.55.52.151]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 76C5BB93; Mon, 3 Oct 2022 12:42:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1664826138; x=1696362138; h=message-id:date:mime-version:subject:to:cc:references: from:in-reply-to:content-transfer-encoding; bh=2vg3bLjyeUzK6paD5/QSLqHjaBUk826u4c5n0Pm3n0U=; b=dmNDLpD0rahgCInzkxntUOT9FMGH70XbzCNSXZFPeyo0NRQn1+iZxZTr ivPRJH+WKEZeHOgQVvTPODvQoHtfqf+LIErBUZUJCTR3/0pqmEfRQRTjl i79ugijAf+vlHCd48Mb45Y8OOx0czAq9ToU/VhLiE+0M5Q11mXqEST2T9 VkBlFNHB79d3sC7lFMxKnNty52YmPwOThfqB7g31ebA3BrSeIS2xDAA/E J1m4cpd35Z/GJN71JMmcPcMfZ03Wn2URTN0uE2LUfR5gXMfIEat9Z/m+r +7bep3NrQ79UNFopNz6W+SQ0awcXray6rTMn+laaY+Wl1FNBqPXQa4ePM Q==; X-IronPort-AV: E=McAfee;i="6500,9779,10489"; a="283109878" X-IronPort-AV: E=Sophos;i="5.93,366,1654585200"; d="scan'208";a="283109878" Received: from fmsmga004.fm.intel.com ([10.253.24.48]) by fmsmga107.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 03 Oct 2022 12:42:18 -0700 X-IronPort-AV: E=McAfee;i="6500,9779,10489"; a="692216031" X-IronPort-AV: E=Sophos;i="5.93,366,1654585200"; d="scan'208";a="692216031" Received: from akashred-mobl.amr.corp.intel.com (HELO [10.212.139.217]) ([10.212.139.217]) by fmsmga004-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 03 Oct 2022 12:42:13 -0700 Message-ID: <18be9cae-91e7-c6f6-a5a7-ec7ceefa5523@intel.com> Date: Mon, 3 Oct 2022 12:42:13 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.11.0 Subject: Re: [PATCH v2 02/39] x86/cet/shstk: Add Kconfig option for Shadow Stack Content-Language: en-US To: Rick Edgecombe , x86@kernel.org, "H . Peter Anvin" , Thomas Gleixner , Ingo Molnar , linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, linux-api@vger.kernel.org, Arnd Bergmann , Andy Lutomirski , Balbir Singh , Borislav Petkov , Cyrill Gorcunov , Dave Hansen , Eugene Syromiatnikov , Florian Weimer , "H . J . Lu" , Jann Horn , Jonathan Corbet , Kees Cook , Mike Kravetz , Nadav Amit , Oleg Nesterov , Pavel Machek , Peter Zijlstra , Randy Dunlap , "Ravi V . Shankar" , Weijiang Yang , "Kirill A . Shutemov" , joao.moreira@intel.com, John Allen , kcc@google.com, eranian@google.com, rppt@kernel.org, jamorris@linux.microsoft.com, dethoma@microsoft.com Cc: Yu-cheng Yu References: <20220929222936.14584-1-rick.p.edgecombe@intel.com> <20220929222936.14584-3-rick.p.edgecombe@intel.com> From: Dave Hansen In-Reply-To: <20220929222936.14584-3-rick.p.edgecombe@intel.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-5.9 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A, RCVD_IN_DNSWL_MED,SPF_HELO_NONE,SPF_NONE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 9/29/22 15:28, Rick Edgecombe wrote: > +config X86_SHADOW_STACK > + prompt "X86 Shadow Stack" > + def_bool n > + depends on ARCH_HAS_SHADOW_STACK > + select ARCH_USES_HIGH_VMA_FLAGS > + help > + Shadow Stack protection is a hardware feature that detects function > + return address corruption. Today the kernel's support is limited to > + virtualizing it in KVM guests. > + Is this help text up to date? It seems a bit at odds with the series title.