Re: [RFC PATCH v3 05/24] Documentation/x86: Add CET description

From: Yu-cheng Yu
Date: Fri Sep 14 2018 - 17:21:43 EST


On Thu, 2018-08-30 at 22:39 +0200, Pavel Machek wrote:
> Hi!
>
> >
> > diff --git a/Documentation/admin-guide/kernel-parameters.txt
> > b/Documentation/admin-guide/kernel-parameters.txt
> > index 9871e649ffef..b090787188b4 100644
> > --- a/Documentation/admin-guide/kernel-parameters.txt
> > +++ b/Documentation/admin-guide/kernel-parameters.txt
> > @@ -2764,6 +2764,12 @@
> > Â noexec=on: enable non-executable mappings (default)
> > Â noexec=off: disable non-executable mappings
> > Â
> > + no_cet_ibt [X86-64] Disable indirect branch tracking for
> > user-mode
> > + applications
> > +
> > + no_cet_shstk [X86-64] Disable shadow stack support for user-
> > mode
> > + applications
> Hmm, not too consistent with "nosmap" below. Would it make sense to
> have cet=on/off/ibt/shstk instead?

We also have noxsave, noxsaveopt, noxsaves, etc. ÂThis style is more decisive?
If "cet=" is preferred, we can change it later?

Yu-cheng