On Wed, 2020-02-05 at 16:16 -0800, Randy Dunlap wrote:

Hi,

I have a few comments and a question (please see inline below).


On 2/5/20 10:19 AM, Yu-cheng Yu wrote:

[...]

quoted

+arch_prctl(ARCH_X86_CET_LOCK)
+    Lock in CET feature.

which feature?

Both SHSTK and IBT are locked.  They cannot be turned off afterwards.

I will check things you pointed out.

Thanks,
Yu-cheng