ACK: [Trusty][PATCH 0/4] stackprotector config / ARM bootloader
Brad Figg
brad.figg at canonical.com
Mon Dec 14 19:15:53 UTC 2015
On Fri, Dec 11, 2015 at 11:53:22AM -0800, Kamal Mostafa wrote:
> The next 3.13-stable will likely include the two Kees Cook 3.14-mainline
> "stackprotector" patches below, in order to fix an armhf build problem in 3.13
> (which Trusty currently avoids via a SAUCE patch)[0].
>
> For Trusty, this will mean:
>
> - Trusty configs must choose one of CC_STACKPROTECTOR_{NONE,REGULAR,STRONG}
> for arches that enable CC_STACKPROTECTOR.
>
> - Trusty can drop the SAUCE patch (enabling the stack protector for the
> ARM compressed bootloader).
>
> -Kamal
>
> [0] https://lists.ubuntu.com/archives/kernel-team/2015-December/066769.html
>
> .....
>
> Kamal Mostafa (2):
> UBUNTU: [Config] updateconfigs: select CC_STACKPROTECTOR_REGULAR
> Revert "UBUNTU: SAUCE: disable stack-protector for ARM compressed
> bootloader"
>
> Kees Cook (2):
> stackprotector: Unify the HAVE_CC_STACKPROTECTOR logic between
> architectures
> stackprotector: Introduce CONFIG_CC_STACKPROTECTOR_STRONG
>
> Makefile | 20 ++++++-
> arch/Kconfig | 67 ++++++++++++++++++++++
> arch/arm/Kconfig | 13 +----
> arch/arm/Makefile | 4 --
> arch/arm/boot/compressed/Makefile | 1 -
> arch/arm/boot/compressed/misc.c | 14 +++++
> arch/mips/Kconfig | 14 +----
> arch/mips/Makefile | 4 --
> arch/sh/Kconfig | 15 +----
> arch/sh/Makefile | 4 --
> arch/x86/Kconfig | 17 +-----
> arch/x86/Makefile | 8 +--
> debian.master/config/amd64/config.common.amd64 | 1 +
> debian.master/config/annotations | 4 +-
> debian.master/config/arm64/config.common.arm64 | 1 +
> debian.master/config/armhf/config.common.armhf | 1 +
> debian.master/config/config.common.ubuntu | 5 +-
> debian.master/config/enforce | 2 +-
> debian.master/config/i386/config.common.i386 | 1 +
> debian.master/config/powerpc/config.common.powerpc | 1 +
> debian.master/config/ppc64el/config.common.ppc64el | 1 +
> 21 files changed, 118 insertions(+), 80 deletions(-)
>
> --
> 1.9.1
>
>
> --
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
Looks ok to me.
--
Brad Figg brad.figg at canonical.com http://www.canonical.com
More information about the kernel-team
mailing list