Re: [PATCH v24 21/28] riscv: kernel command line option to opt out of user cfi

[PATCH v24 00/28] riscv control-flow integrity for usermode · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 01/28] mm: VM_SHADOW_STACK definition for riscv · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 02/28] dt-bindings: riscv: zicfilp and zicfiss in dt-bindings (extensions.yaml) · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 03/28] riscv: zicfiss / zicfilp enumeration · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 04/28] riscv: zicfiss / zicfilp extension csr and bit definitions · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 05/28] riscv: usercfi state for task and save/restore of CSR_SSP on trap entry/exit · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 06/28] riscv/mm : ensure PROT_WRITE leads to VM_READ | VM_WRITE · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 07/28] riscv/mm: manufacture shadow stack pte · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 08/28] riscv/mm: teach pte_mkwrite to manufacture shadow stack PTEs · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 09/28] riscv/mm: write protect and shadow stack · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 10/28] riscv/mm: Implement map_shadow_stack() syscall · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 11/28] riscv/shstk: If needed allocate a new shadow stack on clone · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 12/28] riscv: Implements arch agnostic shadow stack prctls · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 13/28] prctl: arch-agnostic prctl for indirect branch tracking · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 14/28] riscv: Implements arch agnostic indirect branch tracking prctls · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 15/28] riscv/traps: Introduce software check exception and uprobe handling · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 16/28] riscv: signal: abstract header saving for setup_sigcontext · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 17/28] riscv/signal: save and restore of shadow stack for signal · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 18/28] riscv/kernel: update __show_regs to print shadow stack register · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 19/28] riscv/ptrace: riscv cfi status and state via ptrace and in core files · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 20/28] riscv/hwprobe: zicfilp / zicfiss enumeration in hwprobe · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 21/28] riscv: kernel command line option to opt out of user cfi · Deepak Gupta <hidden> · 2025-12-04
Re: [PATCH v24 21/28] riscv: kernel command line option to opt out of user cfi · Randy Dunlap <hidden> · 2025-12-04
[PATCH v24 22/28] riscv: enable kernel access to shadow stack memory via FWFT sbi call · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 23/28] arch/riscv: compile vdso with landing pad and shadow stack note · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 24/28] arch/riscv: dual vdso creation logic and select vdso based on hw · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 25/28] riscv: create a config for shadow stack and landing pad instr support · Deepak Gupta <hidden> · 2025-12-04
Re: [PATCH v24 25/28] riscv: create a config for shadow stack and landing pad instr support · Randy Dunlap <hidden> · 2025-12-04
Re: [PATCH v24 25/28] riscv: create a config for shadow stack and landing pad instr support · Deepak Gupta <hidden> · 2025-12-05
Re: [PATCH v24 25/28] riscv: create a config for shadow stack and landing pad instr support · Randy Dunlap <hidden> · 2025-12-05
[PATCH v24 26/28] riscv: Documentation for landing pad / indirect branch tracking · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 27/28] riscv: Documentation for shadow stack on riscv · Deepak Gupta <hidden> · 2025-12-04
[PATCH v24 28/28] kselftest/riscv: kselftest for user mode cfi · Deepak Gupta <hidden> · 2025-12-04

From: Randy Dunlap <hidden>
Date: 2025-12-04 22:14:10
Also in: linux-arch, linux-doc, linux-fsdevel, linux-kselftest, linux-mm, linux-riscv, lkml, rust-for-linux


On 12/4/25 12:04 PM, Deepak Gupta wrote:

quoted hunk ↗ jump to hunk

diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt
index 6c42061ca20e..453127ef8746 100644
--- a/Documentation/admin-guide/kernel-parameters.txt
+++ b/Documentation/admin-guide/kernel-parameters.txt

@@ -6453,6 +6453,14 @@
 			replacement properties are not found. See the Kconfig
 			entry for RISCV_ISA_FALLBACK.
 
+	riscv_nousercfi=
+		all	Disable user cfi ABI to userspace even if cpu extension

			                                              extensions

+			are available.
+		bcfi	Disable user backward cfi ABI to userspace even if
+			shadow stack extension is available.
+		fcfi	Disable user forward cfi ABI to userspace even if landing
+			pad extension is available.
+
 	ro		[KNL] Mount root device read-only on boot
 
 	rodata=		[KNL,EARLY]

-- 
~Randy

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help