Kees Cook
44c6dc940b
Makefile: introduce CONFIG_CC_STACKPROTECTOR_AUTO ...
Nearly all modern compilers support a stack-protector option, and nearly
all modern distributions enable the kernel stack-protector, so enabling
this by default in kernel builds would make sense. However, Kconfig does
not have knowledge of available compiler features, so it isn't safe to
force on, as this would unconditionally break builds for the compilers or
architectures that don't have support. Instead, this introduces a new
option, CONFIG_CC_STACKPROTECTOR_AUTO, which attempts to discover the best
possible stack-protector available, and will allow builds to proceed even
if the compiler doesn't support any stack-protector.
This option is made the default so that kernels built with modern
compilers will be protected-by-default against stack buffer overflows,
avoiding things like the recent BlueBorne attack. Selection of a specific
stack-protector option remains available, including disabling it.
Additionally, tiny.config is adjusted to use CC_STACKPROTECTOR_NONE, since
that's the option with the least code size (and it used to be the default,
so we have to explicitly choose it there now).
Link: http://lkml.kernel.org/r/1510076320-69931-4-git-send-email-keescook@chromium.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Tested-by: Laura Abbott <labbott@redhat.com>
Cc: Masahiro Yamada <yamada.masahiro@socionext.com>
Cc: Arnd Bergmann <arnd@arndb.de>
Cc: Josh Triplett <josh@joshtriplett.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2018-02-06 18:32:44 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2018-01-31 14:31:10 -08:00
string: drop __must_check from strscpy() and restore strscpy() usages in cgroup
2018-01-19 08:51:36 -08:00
Makefile: introduce CONFIG_CC_STACKPROTECTOR_AUTO
2018-02-06 18:32:44 -08:00
signal: Simplify and fix kdb_send_sig
2018-01-03 18:01:08 -06:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2018-01-31 14:31:10 -08:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
Merge branch 'irq-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2018-02-04 11:41:31 -08:00
Merge branch 'for-4.16/remove-immediate' into for-linus
2018-01-31 16:36:38 +01:00
Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2018-01-30 10:44:56 -08:00
x86/power: Fix swsusp_arch_resume prototype
2018-02-02 23:33:50 +01:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk
2018-02-01 13:36:15 -08:00
SCSI misc on 20180131
2018-01-31 11:23:28 -08:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk
2018-02-01 13:36:15 -08:00
Merge branch 'misc.poll' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2018-01-30 17:58:07 -08:00
Mostly clean ups and small fixes
2018-02-01 13:15:23 -08:00
kernel/acct.c: fix the acct->needcheck check in check_free_space()
2018-01-04 16:45:09 -08:00
Audit: remove unused audit_log_secctx function
2017-11-10 16:08:47 -05:00
audit/stable-4.15 PR 20171113
2017-11-15 13:28:48 -08:00
Merge branch 'fsnotify' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs
2017-11-14 14:08:20 -08:00
audit/stable-4.13 PR 20170816
2017-08-16 16:48:34 -07:00
audit: filter PATH records keyed on filesystem magic
2017-11-10 16:08:56 -05:00
audit/stable-4.15 PR 20171113
2017-11-15 13:28:48 -08:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
sched_rr_get_interval(): move compat to native, get rid of set_fs()
2017-09-20 00:30:57 -04:00
Merge branch 'timers-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2017-12-31 12:30:34 -08:00
PM / CPU: replace raw_notifier with atomic_notifier
2017-07-31 13:09:49 +02:00
kdump: write correct address of mem_section into vmcoreinfo
2018-01-13 10:42:48 -08:00
delayacct: Account blkio completion on the correct task
2018-01-16 03:29:36 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
kernel/exit.c: export abort() to modules
2018-01-04 16:45:09 -08:00
kprobes, x86/alternatives: Use text_mutex to protect smp_alt_modules
2017-11-07 12:20:09 +01:00
error-injection: Support fault injection framework
2018-01-12 17:33:38 -08:00
Currently, hardened usercopy performs dynamic bounds checking on slab
2018-02-03 16:25:42 -08:00
futex: Fix OWNER_DEAD fixup
2018-01-24 09:58:18 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
kernel: make groups_sort calling a responsibility group_info allocators
2017-12-14 16:00:49 -08:00
irq/work: Improve the flag definitions
2018-01-08 19:43:15 +01:00
sched/core: Fix cpu.max vs. cpuhotplug deadlock
2018-01-24 10:03:44 +01:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk
2018-02-01 13:36:15 -08:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
kcov: fix comparison callback signature
2017-12-14 16:00:48 -08:00
kdump: protect vmcoreinfo data under the crash memory
2017-07-12 16:26:00 -07:00
x86/mm, kexec: Allow kexec to be used with SME
2017-07-18 11:38:04 +02:00
resource: Provide resource struct in resource walk callback
2017-11-07 15:35:57 +01:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
kmod: move #ifdef CONFIG_MODULES wrapper to Makefile
2017-09-08 18:26:51 -07:00
error-injection: Separate error-injection from kprobe
2018-01-12 17:33:38 -08:00
kexec: move vmcoreinfo out of the kernel's .bss section
2017-07-12 16:25:59 -07:00
treewide: Remove TIMER_FUNC_TYPE and TIMER_DATA_TYPE casts
2017-11-21 16:35:54 -08:00
error-injection: Support fault injection framework
2018-01-12 17:33:38 -08:00
memremap: add scheduling point to devm_memremap_pages
2017-10-03 17:54:25 -07:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/pmladek/printk
2018-02-01 13:36:15 -08:00
padata: add SPDX identifier
2018-01-05 18:43:00 +11:00
kernel/panic.c: add TAINT_AUX
2017-11-17 16:10:04 -08:00
kernel/params.c: improve STANDARD_PARAM_DEF readability
2017-10-03 17:54:26 -07:00
init_task out-of-lining
2018-01-29 09:08:34 -08:00
pid: remove pidhash
2017-11-17 16:10:04 -08:00
Merge branch 'next-seccomp' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2018-01-31 13:44:45 -08:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
kernel/reboot.c: add devm_register_reboot_notifier()
2017-11-17 16:10:04 -08:00
ipc, kernel, mm: annotate ->poll() instances
2017-11-27 16:20:05 -05:00
x86/mm, resource: Use PAGE_KERNEL protection for ioremap of memory pages
2017-11-07 15:35:58 +01:00
Merge branch 'next-seccomp' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2018-01-31 13:44:45 -08:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching
2018-01-31 13:02:18 -08:00
smp/core: Use lockdep to assert IRQs are disabled/enabled
2017-11-08 11:13:50 +01:00
watchdog/core, powerpc: Lock cpus across reconfiguration
2017-10-04 10:53:54 +02:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
softirq: Eliminate cond_resched_rcu_qs() in favor of cond_resched()
2017-12-04 10:28:58 -08:00
fix typo in assignment of fs default overflow gid
2017-12-14 16:01:45 -06:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mm, hugetlb: remove hugepages_treat_as_movable sysctl
2018-01-31 17:18:37 -08:00
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
locking/barriers: Convert users of lockless_dereference() to READ_ONCE()
2017-12-17 13:57:15 +01:00
kprobes: Disable the jprobes test code
2017-10-20 11:02:54 +02:00
torture: Save a line in stutter_wait(): while -> for
2017-12-11 09:18:30 -08:00
tracepoint: Remove smp_read_barrier_depends() from comment
2017-12-04 10:52:56 -08:00
kernel: make groups_sort calling a responsibility group_info allocators
2017-12-14 16:00:49 -08:00
kernel/umh.c: optimize 'proc_cap_handler()'
2017-11-17 16:10:01 -08:00
smp: Avoid using two cache lines for struct call_single_data
2017-08-29 15:14:38 +02:00
userns: use union in {g,u}idmap struct
2017-10-31 17:22:58 -05:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
2017-11-16 12:20:15 -08:00
Merge branch 'linus' into sched/core, to pick up fixes
2017-11-08 10:17:15 +01:00
Merge branch 'linus' into core/urgent, to pick up dependent commits
2017-11-04 08:53:04 +01:00
Staging/IIO patches for 4.16-rc1
2018-02-01 09:51:57 -08:00
Merge branch 'for-4.14-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq
2017-11-06 12:26:49 -08:00
44c6dc940b