Re: [PATCH] hardening: Refresh KCFI options, add some more

From: Peter Zijlstra
Date: Tue Apr 30 2024 - 05:26:55 EST


On Fri, Apr 26, 2024 at 03:29:44PM -0700, Kees Cook wrote:

> - CONFIG_CFI_CLANG=y for x86 and arm64. (And disable FINEIBT since
> it isn't as secure as straight KCFI.)

Oi ?