[PATCH 0/7] Control Flow Enforcement - Part (4)
From: Yu-cheng Yu
Date: Thu Jun 07 2018 - 11:34:50 EST
This series introduces CET - indirect branch tracking
The major task of indirect branch tracking is for the compiler to
insert the ENDBR instructions at all valid branch targets.
The kernel provides:
CPUID enumeration and feature setup;
Legacy bitmap allocation;
Some basic supporting routines.
In this patch, there are also a CET command-line utility and
PTRACE support.
H.J. Lu (2):
x86: Insert endbr32/endbr64 to vDSO
tools: Add cetcmd
Yu-cheng Yu (5):
x86/cet: Add Kconfig option for user-mode Indirect Branch Tracking
x86/cet: User-mode indirect branch tracking support
mm/mmap: Add IBT bitmap size to address space limit check
x86/cet: add arcp_prctl functions for indirect branch tracking
x86/cet: Add PTRACE interface for CET
arch/x86/Kconfig | 12 +++
arch/x86/entry/vdso/.gitignore | 4 +
arch/x86/entry/vdso/Makefile | 34 +++++++
arch/x86/entry/vdso/endbr.sh | 32 ++++++
arch/x86/include/asm/cet.h | 9 ++
arch/x86/include/asm/disabled-features.h | 8 +-
arch/x86/include/asm/fpu/regset.h | 7 +-
arch/x86/include/uapi/asm/prctl.h | 1 +
arch/x86/include/uapi/asm/resource.h | 5 +
arch/x86/kernel/cet.c | 73 ++++++++++++++
arch/x86/kernel/cet_prctl.c | 54 +++++++++-
arch/x86/kernel/cpu/common.c | 20 +++-
arch/x86/kernel/elf.c | 19 +++-
arch/x86/kernel/fpu/regset.c | 41 ++++++++
arch/x86/kernel/process.c | 2 +
arch/x86/kernel/ptrace.c | 16 +++
include/uapi/asm-generic/resource.h | 3 +
include/uapi/linux/elf.h | 1 +
mm/mmap.c | 8 +-
tools/Makefile | 13 +--
tools/arch/x86/include/uapi/asm/elf_property.h | 16 +++
tools/arch/x86/include/uapi/asm/prctl.h | 33 ++++++
tools/cet/.gitignore | 1 +
tools/cet/Makefile | 11 ++
tools/cet/cetcmd.c | 134 +++++++++++++++++++++++++
tools/include/uapi/asm/elf_property.h | 4 +
tools/include/uapi/asm/prctl.h | 4 +
27 files changed, 549 insertions(+), 16 deletions(-)
create mode 100644 arch/x86/entry/vdso/endbr.sh
create mode 100644 tools/arch/x86/include/uapi/asm/elf_property.h
create mode 100644 tools/arch/x86/include/uapi/asm/prctl.h
create mode 100644 tools/cet/.gitignore
create mode 100644 tools/cet/Makefile
create mode 100644 tools/cet/cetcmd.c
create mode 100644 tools/include/uapi/asm/elf_property.h
create mode 100644 tools/include/uapi/asm/prctl.h
--
2.15.1