Re: [PATCH v3 00/10] x86/ibt: FineIBT-BHI

From: Kees Cook
Date: Wed Feb 19 2025 - 12:36:44 EST


On Wed, Feb 19, 2025 at 05:21:07PM +0100, Peter Zijlstra wrote:
> Also note that LKDTM's CFI_FORWARD_PROTO test will do a double splat for
> paranoid in warn/permissive mode, since both the caller and callee hash check
> will fail.

Hah! I will declare that as Working As Intended, though I guess it is a
bit noisy. But given permissive is mainly a debugging feature, I think
this is fine.

--
Kees Cook