Received: by 2002:a05:6358:9144:b0:117:f937:c515 with SMTP id r4csp1860169rwr; Fri, 28 Apr 2023 02:54:39 -0700 (PDT) X-Google-Smtp-Source: ACHHUZ44tRA6kyPALdeEU3xQQKhYOkxgE/4vzeYoJNo0394ycTrMC+u00uDx0SJgrlNw2XiD0SLd X-Received: by 2002:a17:903:22c7:b0:1a9:98ae:5975 with SMTP id y7-20020a17090322c700b001a998ae5975mr11536648plg.30.1682675678761; Fri, 28 Apr 2023 02:54:38 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1682675678; cv=none; d=google.com; s=arc-20160816; b=UIfQKF3yJ++QXb3prhgG4R/OcLJ+CtIw5VmWlRUfVnVy785sTIatzhdZk1Q9cXg/Xk igXBNJtVSs5St2zuNzvFySRPXemcLupvdb1Wo0p2ObqNb0leMbZZh5DJ87u8KUWmo+Pf H6nC9L7O0SK92kptkS0O7dUgtX7T+v+X5nAR7ou/2+zJ7dW97ZfMBpCfiKxmSaTkaEwl vZFxXdKAWnQQw5cllsxd+veWzkZAJIzXqDiufhqVGwIoDSUxPKKEL9Dhi+MSuBNeEndb oDmzP/YVJcLGcej7O+wTT4NsaQwRevzrs60lbs3zl+3PDiVW1mMLoX3sgX5vIt9KZx6I EaKw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from; bh=Ee5H+WD+CgTi2Z0fkTjgtk88ZrZst7JG8IeeyEgZ6HY=; b=QMJWrGNDkUjz5RQucDNBwOSuzj4A2rZJONLHVjx4SJwW4YbPeDmN2hjeCkGTqPWZ6u KXjKygpSstLTJXKrAlgGeQFbVBtAdpcrPwP23c8YPUHSAx51KSBgPxuFE8WxQSuCdRzb +pA/wSxHaA+vVYvnY+Jcg/xbaf9WLJG3LA9jv2ivz0hVlT6QkAY3/uir+cR8m8dRDuTH 1ZkxsPGaY9uMg+986m86D7nrtCXvA0JVWf1HSCMO9U1ayChdMsZdYqqypWh5IeKlerql IDu4aQUfeoBf3L1KtO/urcD86fCAqeH/ZImvUc3Rpf+sD5psRV41Aoeqg7hnc7rMqvbY aF8Q== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=antgroup.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id y16-20020a170902b49000b0019f359c651esi16843789plr.556.2023.04.28.02.54.26; Fri, 28 Apr 2023 02:54:38 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=antgroup.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1345821AbjD1Jxc (ORCPT + 99 others); Fri, 28 Apr 2023 05:53:32 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:33496 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1345792AbjD1JxP (ORCPT ); Fri, 28 Apr 2023 05:53:15 -0400 Received: from out0-206.mail.aliyun.com (out0-206.mail.aliyun.com [140.205.0.206]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 9353044A2 for ; Fri, 28 Apr 2023 02:52:51 -0700 (PDT) X-Alimail-AntiSpam: AC=PASS;BC=-1|-1;BR=01201311R251e4;CH=green;DM=||false|;DS=||;FP=0|-1|-1|-1|0|-1|-1|-1;HT=ay29a033018047208;MF=houwenlong.hwl@antgroup.com;NM=1;PH=DS;RN=11;SR=0;TI=SMTPD_---.STFoGIL_1682675546; Received: from localhost(mailfrom:houwenlong.hwl@antgroup.com fp:SMTPD_---.STFoGIL_1682675546) by smtp.aliyun-inc.com; Fri, 28 Apr 2023 17:52:27 +0800 From: "Hou Wenlong" To: linux-kernel@vger.kernel.org Cc: "Thomas Garnier" , "Lai Jiangshan" , "Kees Cook" , "Hou Wenlong" , "Thomas Gleixner" , "Ingo Molnar" , "Borislav Petkov" , "Dave Hansen" , , "H. Peter Anvin" Subject: [PATCH RFC 14/43] x86/Kconfig: Introduce new Kconfig for PIE kernel building Date: Fri, 28 Apr 2023 17:50:54 +0800 Message-Id: X-Mailer: git-send-email 2.31.1 In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,SPF_HELO_NONE, SPF_PASS,T_SCC_BODY_TEXT_LINE,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Add a new Kconfig to control the behaviour of PIE building, and disable it now. Suggested-by: Lai Jiangshan Signed-off-by: Hou Wenlong Cc: Thomas Garnier Cc: Kees Cook --- arch/x86/Kconfig | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig index c94297369448..68e5da464b96 100644 --- a/arch/x86/Kconfig +++ b/arch/x86/Kconfig @@ -2208,6 +2208,10 @@ config RELOCATABLE it has been loaded at and the compile time physical address (CONFIG_PHYSICAL_START) is used as the minimum location. +config X86_PIE + def_bool n + depends on X86_64 + config RANDOMIZE_BASE bool "Randomize the address of the kernel image (KASLR)" depends on RELOCATABLE -- 2.31.1