Re: [PATCH v3 07/16] lkdtm: Disable UNSET_SMEP with CFI
From: Kees Cook
Date: Tue Sep 14 2021 - 15:30:35 EST
On Tue, Sep 14, 2021 at 12:10:36PM -0700, Sami Tolvanen wrote:
> Disable the UNSET_SMEP test when CONFIG_CFI_CLANG is enabled as
> jumping to a call gadget would always trip CFI instead.
>
> Signed-off-by: Sami Tolvanen <samitolvanen@xxxxxxxxxx>
Yeah, (thankfully) this test can't work sanely under CFI.
Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
--
Kees Cook