kernel-hardening.lists.openwall.com archive mirror
 help / color / mirror / Atom feed
 messages from 2020-02-13 00:48:53 to 2020-02-28 16:32:19 UTC [more...]

[PATCH 00/18] add support for Clang's Shadow Call Stack
 2020-02-28 16:31 UTC  (46+ messages)
` [PATCH v7 00/11] "
  ` [PATCH v7 11/11] arm64: scs: add shadow stacks for SDEI
` [PATCH v8 00/12] add support for Clang's Shadow Call Stack
  ` [PATCH v8 01/12] add support for Clang's Shadow Call Stack (SCS)
  ` [PATCH v8 02/12] scs: add accounting
  ` [PATCH v8 03/12] scs: add support for stack usage debugging
  ` [PATCH v8 04/12] scs: disable when function graph tracing is enabled
  ` [PATCH v8 05/12] arm64: reserve x18 from general allocation with SCS
  ` [PATCH v8 06/12] arm64: preserve x18 when CPU is suspended
  ` [PATCH v8 07/12] arm64: efi: restore x18 if it was corrupted
  ` [PATCH v8 08/12] arm64: vdso: disable Shadow Call Stack
  ` [PATCH v8 09/12] arm64: disable SCS for hypervisor code
  ` [PATCH v8 10/12] arm64: implement Shadow Call Stack
  ` [PATCH v8 11/12] arm64: scs: add shadow stacks for SDEI
  ` [PATCH v8 12/12] efi/libstub: disable SCS
` [PATCH v9 00/12] add support for Clang's Shadow Call Stack
  ` [PATCH v9 01/12] add support for Clang's Shadow Call Stack (SCS)
  ` [PATCH v9 02/12] scs: add accounting
  ` [PATCH v9 03/12] scs: add support for stack usage debugging
  ` [PATCH v9 04/12] scs: disable when function graph tracing is enabled
  ` [PATCH v9 05/12] arm64: reserve x18 from general allocation with SCS
  ` [PATCH v9 06/12] arm64: preserve x18 when CPU is suspended
  ` [PATCH v9 07/12] arm64: efi: restore x18 if it was corrupted
  ` [PATCH v9 08/12] arm64: vdso: disable Shadow Call Stack
  ` [PATCH v9 09/12] arm64: disable SCS for hypervisor code
  ` [PATCH v9 10/12] arm64: implement Shadow Call Stack
  ` [PATCH v9 11/12] arm64: scs: add shadow stacks for SDEI
  ` [PATCH v9 12/12] efi/libstub: disable SCS

[PATCH v5 0/6] ubsan: Split out bounds checker
 2020-02-28 12:45 UTC  (8+ messages)
` [PATCH v5 1/6] ubsan: Add trap instrumentation option
` [PATCH v5 2/6] ubsan: Split "bounds" checker from other options
` [PATCH v5 3/6] lkdtm/bugs: Add arithmetic overflow and array bounds checks
` [PATCH v5 4/6] ubsan: Check panic_on_warn
` [PATCH v5 5/6] kasan: Unset panic_on_warn before calling panic()
` [PATCH v5 6/6] ubsan: Include bug type in report header

[RESEND PATCH v4 05/10] lib/refcount: Improve performance of generic REFCOUNT_FULL code
 2020-02-28 10:43 UTC  (2+ messages)

[PATCH v3 0/6] implement KASLR for powerpc/fsl_booke/64
 2020-02-28  6:47 UTC  (28+ messages)
` [PATCH v3 1/6] powerpc/fsl_booke/kaslr: refactor kaslr_legal_offset() and kaslr_early_init()
` [PATCH v3 2/6] powerpc/fsl_booke/64: introduce reloc_kernel_entry() helper
` [PATCH v3 3/6] powerpc/fsl_booke/64: implement KASLR for fsl_booke64
        ` [RFC PATCH] Use IS_ENABLED() instead of #ifdefs
` [PATCH v3 5/6] powerpc/fsl_booke/64: clear the original kernel if randomized
` [PATCH v3 6/6] powerpc/fsl_booke/kaslr: rename kaslr-booke32.rst to kaslr-booke.rst and add 64bit part

[RFC PATCH 00/11] Finer grained kernel address space randomization
 2020-02-28  3:36 UTC  (13+ messages)
` [RFC PATCH 05/11] x86: Makefile: Add build and config option for CONFIG_FG_KASLR
` [RFC PATCH 08/11] x86: Add support for finer grained KASLR
` [RFC PATCH 09/11] kallsyms: hide layout and expose seed

[PATCH v11 00/11] x86: PIE support to extend KASLR randomization
 2020-02-28  0:00 UTC  (12+ messages)
` [PATCH v11 01/11] x86/crypto: Adapt assembly for PIE support
` [PATCH v11 02/11] x86: Add macro to get symbol address "
` [PATCH v11 03/11] x86: relocate_kernel - Adapt assembly "
` [PATCH v11 04/11] x86/entry/64: "
` [PATCH v11 05/11] x86: pm-trace - "
` [PATCH v11 06/11] x86/CPU: "
` [PATCH v11 07/11] x86/acpi: "
` [PATCH v11 08/11] x86/boot/64: "
` [PATCH v11 09/11] x86/power/64: "
` [PATCH v11 10/11] x86/paravirt: "
` [PATCH v11 11/11] x86/alternatives: "

[PATCH v4 0/6] ubsan: Split out bounds checker
 2020-02-27 18:49 UTC  (7+ messages)
` [PATCH v4 1/6] ubsan: Add trap instrumentation option
` [PATCH v4 2/6] ubsan: Split "bounds" checker from other options
` [PATCH v4 3/6] lkdtm/bugs: Add arithmetic overflow and array bounds checks
` [PATCH v4 4/6] ubsan: Check panic_on_warn
` [PATCH v4 5/6] kasan: Unset panic_on_warn before calling panic()
` [PATCH v4 6/6] ubsan: Include bug type in report header

[RFC PATCH v14 00/10] Landlock LSM
 2020-02-27 17:01 UTC  (22+ messages)
` [RFC PATCH v14 01/10] landlock: Add object and rule management
` [RFC PATCH v14 02/10] landlock: Add ruleset and domain management
` [RFC PATCH v14 03/10] landlock: Set up the security framework and manage credentials
` [RFC PATCH v14 04/10] landlock: Add ptrace restrictions
` [RFC PATCH v14 05/10] fs,landlock: Support filesystem access-control
` [RFC PATCH v14 06/10] landlock: Add syscall implementation
` [RFC PATCH v14 07/10] arch: Wire up landlock() syscall
` [RFC PATCH v14 08/10] selftests/landlock: Add initial tests
` [RFC PATCH v14 09/10] samples/landlock: Add a sandbox manager example
` [RFC PATCH v14 10/10] landlock: Add user and kernel documentation

Maybe inappropriate use BUG_ON() in CONFIG_SLAB_FREELIST_HARDENED
 2020-02-27 11:28 UTC  (7+ messages)

[PATCH 0/5] Annotate allocation functions with alloc_size attribute
 2020-02-26 21:56 UTC  (6+ messages)
` [PATCH 5/5] [RFC] mm: annotate memory allocation functions with their sizes

[PATCH v5 0/8] set_memory() routines and STRICT_MODULE_RWX
 2020-02-26 21:52 UTC  (12+ messages)
` [PATCH v5 1/8] powerpc/mm: Implement set_memory() routines
` [PATCH v5 2/8] powerpc/kprobes: Mark newly allocated probes as RO
` [PATCH v5 3/8] powerpc/mm/ptdump: debugfs handler for W+X checks at runtime
` [PATCH v5 4/8] powerpc: Set ARCH_HAS_STRICT_MODULE_RWX
` [PATCH v5 5/8] powerpc/configs: Enable STRICT_MODULE_RWX in skiroot_defconfig
` [PATCH v5 6/8] powerpc/mm: implement set_memory_attr()
` [PATCH v5 7/8] powerpc/32: use set_memory_attr()
` [PATCH v5 8/8] powerpc/mm: Disable set_memory() routines when strict RWX isn't enabled

[PATCH] x86/mm/init_32: Don't print out kernel memory layout if KASLR
 2020-02-26 21:50 UTC 

[PATCH v4 0/8] set_memory() routines and STRICT_MODULE_RWX
 2020-02-26  7:19 UTC  (10+ messages)
` [PATCH v4 1/8] powerpc/mm: Implement set_memory() routines
` [PATCH v4 2/8] powerpc/kprobes: Mark newly allocated probes as RO
` [PATCH v4 3/8] powerpc/mm/ptdump: debugfs handler for W+X checks at runtime
` [PATCH v4 4/8] powerpc: Set ARCH_HAS_STRICT_MODULE_RWX
` [PATCH v4 5/8] powerpc/configs: Enable STRICT_MODULE_RWX in skiroot_defconfig
` [PATCH v4 6/8] powerpc/mm: implement set_memory_attr()
` [PATCH v4 7/8] powerpc/32: use set_memory_attr()
` [PATCH v4 8/8] powerpc/mm: Disable set_memory() routines when strict RWX isn't enabled

[PATCH] gcc-plugins: fix gcc-plugins directory path in documentation
 2020-02-25 18:58 UTC  (2+ messages)

[PATCH v4 0/6] binfmt_elf: Update READ_IMPLIES_EXEC logic for modern CPUs
 2020-02-25  5:13 UTC  (7+ messages)
` [PATCH v4 1/6] x86/elf: Add table to document READ_IMPLIES_EXEC
` [PATCH v4 2/6] x86/elf: Split READ_IMPLIES_EXEC from executable GNU_STACK
` [PATCH v4 3/6] x86/elf: Disable automatic READ_IMPLIES_EXEC for 64-bit address spaces
` [PATCH v4 4/6] arm32/64, elf: Add tables to document READ_IMPLIES_EXEC
` [PATCH v4 5/6] arm32/64, elf: Split READ_IMPLIES_EXEC from executable GNU_STACK
` [PATCH v4 6/6] arm64, elf: Disable automatic READ_IMPLIES_EXEC for 64-bit address spaces

[PATCH v8 00/11] proc: modernize proc to support multiple private instances
 2020-02-24 16:29 UTC  (49+ messages)
` [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
                              ` [PATCH 0/7] proc: Dentry flushing without proc_mnt
                                ` [PATCH 1/7] proc: Rename in proc_inode rename sysctl_inodes sibling_inodes
                                ` [PATCH 2/7] proc: Generalize proc_sys_prune_dcache into proc_prune_siblings_dcache
                                ` [PATCH 3/7] proc: Mov rcu_read_(lock|unlock) in proc_prune_siblings_dcache
                                ` [PATCH 4/7] proc: Use d_invalidate "
                                ` [PATCH 5/7] proc: Clear the pieces of proc_inode that proc_evict_inode cares about
                                ` [PATCH 6/7] proc: Use a list of inodes to flush from proc
                                ` [PATCH 7/7] proc: Ensure we see the exit of each process tid exactly once
                                ` [PATCH v2 0/6] proc: Dentry flushing without proc_mnt
                                  ` [PATCH v2 1/6] proc: Rename in proc_inode rename sysctl_inodes sibling_inodes
                                  ` [PATCH v2 2/6] proc: Generalize proc_sys_prune_dcache into proc_prune_siblings_dcache
                                  ` [PATCH v2 3/6] proc: In proc_prune_siblings_dcache cache an aquired super block
                                  ` [PATCH v2 4/6] proc: Use d_invalidate in proc_prune_siblings_dcache
                                  ` [PATCH v2 5/6] proc: Clear the pieces of proc_inode that proc_evict_inode cares about
                                  ` [PATCH v2 6/6] proc: Use a list of inodes to flush from proc

[RFC PATCH 06/11] x86: make sure _etext includes function sections
 2020-02-21 23:05 UTC  (9+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).