Re: [PATCH v2] kunit: cfi: Add test for kCFI indirect-call type checks

[Kees Cook]

On Fri, Jun 19, 2026 at 11:37:08AM +0200, Peter Zijlstra wrote:
> This is really rather horrible. Also, now all an attacker needs to do is
> ensure cfi_kunit_handled() unconditionally returns true. IOW, no distro
> must ever have this KUNIT crap enabled.

Isn't that already true? I thought, like LKDTM, nothing ships with KUnit
built in?

-- 
Kees Cook