Re: [RFC PATCH v3 05/24] Documentation/x86: Add CET description
From: Randy Dunlap <rdunlap@infradead.org>
Date: 2018-09-03 02:57:21
Also in:
linux-api, linux-arch, linux-mm, lkml
Hi, One spello: On 08/30/2018 07:38 AM, Yu-cheng Yu wrote:
quoted hunk ↗ jump to hunk
diff --git a/Documentation/x86/intel_cet.rst b/Documentation/x86/intel_cet.rst new file mode 100644 index 000000000000..337baa1f6980 --- /dev/null +++ b/Documentation/x86/intel_cet.rst@@ -0,0 +1,252 @@ +========================================= +Control Flow Enforcement Technology (CET) +========================================= + +[1] Overview +============ + +Control Flow Enforcement Technology (CET) provides protection against +return/jump-oriented programing (ROP) attacks. It can be implemented
programming
+to protect both the kernel and applications. In the first phase, +only the user-mode protection is implemented for the 64-bit kernel. +Thirty-two bit applications are supported under the compatibility +mode.
-- ~Randy