Re: [kernel-hardening] [PATCH v5 1/4] gcc-plugins: Add the initify gcc plugin

From: Andrew Donnellan
Date: Mon Mar 27 2017 - 23:05:57 EST


On 27/03/17 18:38, Andrew Donnellan wrote:
On 01/02/17 07:24, Kees Cook wrote:
From: Emese Revfy <re.emese@xxxxxxxxx>

The kernel already has a mechanism to free up code and data memory that
is only used during kernel or module initialization. This plugin will
teach the compiler to find more such code and data that can be freed
after initialization.

Currently checking whether we can wire this up for powerpc without too
many problems...

Added "select HAVE_GCC_PLUGIN_INITIFY_INIT_EXIT if GCC_PLUGINS" to arch/powerpc/Kconfig and have successfully compiled and booted a modular and non-modular powernv_defconfig, it looks like we handle the .exit sections correctly.

Could this be folded in for further testing when you get around to v6, Kees?

--
Andrew Donnellan OzLabs, ADL Canberra
andrew.donnellan@xxxxxxxxxxx IBM Australia Limited