Re: [GIT PULL] hardening fix for v7.3-rc2
From: Kees Cook
Date: Wed Sep 02 2026 - 19:50:41 EST
On Wed, Sep 02, 2026 at 04:07:46PM -0700, Linus Torvalds wrote:
> On Wed, 2 Sept 2026 at 09:31, Kees Cook <kees@xxxxxxxxxx> wrote:
> >
> > - Default randstruct off with rust for better allmodconfig coverage
> > (Mark Brown)
>
> Should we just default randstruct off entirely?
>
> It defaults to off for any *real* build for good reasons. I'm not
> convinced it should be on for build testing either. Maybe the active
> compiler bugs are gone, but this whole commit is just an example of
> how RANDSTRUCT_FULL really isn't a good default - not for real life,
> and not for build test coverage.
I have a fix for it with Rust, and it'll be in -next after -rc2 is out.
We still have real-world users that depend on randstruct, so I'd like to
continue to make breakage visible via all*config builds, etc.
--
Kees Cook