Re: [PATCH v3 00/10] x86/ibt: FineIBT-BHI
From: Kees Cook
Date: Wed Feb 19 2025 - 12:36:44 EST
On Wed, Feb 19, 2025 at 05:21:07PM +0100, Peter Zijlstra wrote:
> Also note that LKDTM's CFI_FORWARD_PROTO test will do a double splat for
> paranoid in warn/permissive mode, since both the caller and callee hash check
> will fail.
Hah! I will declare that as Working As Intended, though I guess it is a
bit noisy. But given permissive is mainly a debugging feature, I think
this is fine.
--
Kees Cook