[PATCH v14 00/26] Control-flow Enforcement: Shadow Stack · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 01/26] Documentation/x86: Add CET description · Yu-cheng Yu <hidden> · 2020-10-12
Re: [PATCH v14 01/26] Documentation/x86: Add CET description · Borislav Petkov <bp@alien8.de> · 2020-11-06
Re: [PATCH v14 01/26] Documentation/x86: Add CET description · Yu, Yu-cheng <hidden> · 2020-11-06
Re: [PATCH v14 01/26] Documentation/x86: Add CET description · Borislav Petkov <bp@alien8.de> · 2020-11-06
Re: [PATCH v14 01/26] Documentation/x86: Add CET description · Yu, Yu-cheng <hidden> · 2020-11-06
[PATCH v14 03/26] x86/fpu/xstate: Introduce CET MSR XSAVES supervisor states · Yu-cheng Yu <hidden> · 2020-10-12
Re: [PATCH v14 03/26] x86/fpu/xstate: Introduce CET MSR XSAVES supervisor states · Cyrill Gorcunov <hidden> · 2020-10-12
Re: [PATCH v14 03/26] x86/fpu/xstate: Introduce CET MSR XSAVES supervisor states · Yu, Yu-cheng <hidden> · 2020-10-12
[PATCH v14 02/26] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Yu-cheng Yu <hidden> · 2020-10-12
Re: [PATCH v14 02/26] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Borislav Petkov <bp@alien8.de> · 2020-11-06
Re: [PATCH v14 02/26] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Yu, Yu-cheng <hidden> · 2020-11-06
Re: [PATCH v14 02/26] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Borislav Petkov <bp@alien8.de> · 2020-11-06
Re: [PATCH v14 02/26] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Yu, Yu-cheng <hidden> · 2020-11-06
[PATCH v14 09/26] drm/i915/gvt: Change _PAGE_DIRTY to _PAGE_DIRTY_BITS · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 11/26] x86/mm: Update ptep_set_wrprotect() and pmdp_set_wrprotect() for transition from _PAGE_DIRTY_HW to _PAGE_COW · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 15/26] mm: Fixup places that call pte_mkwrite() directly · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 08/26] x86/mm: Introduce _PAGE_COW · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 10/26] x86/mm: Update pte_modify for _PAGE_COW · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 06/26] x86/mm: Change _PAGE_DIRTY to _PAGE_DIRTY_HW · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 17/26] mm/mmap: Add shadow stack pages to memory accounting · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 23/26] ELF: Introduce arch_setup_elf_property() · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 20/26] x86/cet/shstk: User-mode shadow stack support · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 21/26] x86/cet/shstk: Handle signals for shadow stack · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 26/26] mm: Introduce PROT_SHSTK for shadow stack · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 24/26] x86/cet/shstk: Handle thread shadow stack · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 25/26] x86/cet/shstk: Add arch_prctl functions for shadow stack · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 22/26] binfmt_elf: Define GNU_PROPERTY_X86_FEATURE_1_AND properties · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 18/26] mm: Update can_follow_write_pte() for shadow stack · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 19/26] mm: Re-introduce vm_flags to do_mmap() · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 16/26] mm: Add guard pages around a shadow stack. · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 14/26] x86/mm: Update maybe_mkwrite() for shadow stack · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 12/26] mm: Introduce VM_SHSTK for shadow stack memory · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 13/26] x86/mm: Shadow Stack page fault error checking · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 07/26] x86/mm: Remove _PAGE_DIRTY_HW from kernel RO pages · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 04/26] x86/cet: Add control-protection fault handler · Yu-cheng Yu <hidden> · 2020-10-12
[PATCH v14 05/26] x86/cet/shstk: Add Kconfig option for user-mode Shadow Stack · Yu-cheng Yu <hidden> · 2020-10-12

Re: [PATCH v14 01/26] Documentation/x86: Add CET description

From: Yu, Yu-cheng <hidden>
Date: 2020-11-06 18:32:24
Also in: linux-arch, linux-doc, linux-mm, lkml

On 11/6/2020 10:28 AM, Borislav Petkov wrote:

On Fri, Nov 06, 2020 at 10:16:47AM -0800, Yu, Yu-cheng wrote:

quoted

In the current shell, if GLIBC_TUNABLES variable is set as such,
applications started will have CET features disabled.  I can put more
details here, or maybe a reference to the GLIBC man pages.

Why do you keep repeating "the current shell"? You pass it with
setenv(3) too, can't you?

Ture.  I will revise it.

Yu-cheng

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help