From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 55BB5C433F5 for ; Mon, 10 Oct 2022 12:19:15 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 93B886B0073; Mon, 10 Oct 2022 08:19:14 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 8EB976B0074; Mon, 10 Oct 2022 08:19:14 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 7B3C26B0075; Mon, 10 Oct 2022 08:19:14 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0015.hostedemail.com [216.40.44.15]) by kanga.kvack.org (Postfix) with ESMTP id 692246B0073 for ; Mon, 10 Oct 2022 08:19:14 -0400 (EDT) Received: from smtpin25.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay10.hostedemail.com (Postfix) with ESMTP id 11CA2C0B29 for ; Mon, 10 Oct 2022 12:19:14 +0000 (UTC) X-FDA: 80004944628.25.436732D Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by imf20.hostedemail.com (Postfix) with ESMTP id 514BE1C0034 for ; Mon, 10 Oct 2022 12:19:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1665404352; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=vuVFVTcNy3PvU+4gEYPhzjX6GgrNG/BY4EXShYmdUcQ=; b=cDFhzL4IQnfqzRpKo0PEMHfbElAzQ7SoM+4ecWrG8b2jTs5H8ftVZurpIGjEE4Ogq+sa0y 5tGIlz1Lto50hRIZG3TJL32WLwwEPZMbKs79WCgLCSR8wm638VNp1lVbIHrJmMBHgg8/Wb lmT3y2Cxp4vNjw3ixp+G/CiNSoXN1h8= Received: from mimecast-mx02.redhat.com (mx3-rdu2.redhat.com [66.187.233.73]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-589-cHpdmPekN6WixYccXEvHVw-1; Mon, 10 Oct 2022 08:19:11 -0400 X-MC-Unique: cHpdmPekN6WixYccXEvHVw-1 Received: from smtp.corp.redhat.com (int-mx09.intmail.prod.int.rdu2.redhat.com [10.11.54.9]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id EF8433810D22; Mon, 10 Oct 2022 12:19:09 +0000 (UTC) Received: from oldenburg.str.redhat.com (unknown [10.39.192.124]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 6FBAE401D45; Mon, 10 Oct 2022 12:19:02 +0000 (UTC) From: Florian Weimer To: Rick Edgecombe Cc: x86@kernel.org, "H . Peter Anvin" , Thomas Gleixner , Ingo Molnar , linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, linux-api@vger.kernel.org, Arnd Bergmann , Andy Lutomirski , Balbir Singh , Borislav Petkov , Cyrill Gorcunov , Dave Hansen , Eugene Syromiatnikov , "H . J . Lu" , Jann Horn , Jonathan Corbet , Kees Cook , Mike Kravetz , Nadav Amit , Oleg Nesterov , Pavel Machek , Peter Zijlstra , Randy Dunlap , "Ravi V . Shankar" , Weijiang Yang , "Kirill A . Shutemov" , joao.moreira@intel.com, John Allen , kcc@google.com, eranian@google.com, rppt@kernel.org, jamorris@linux.microsoft.com, dethoma@microsoft.com, Yu-cheng Yu Subject: Re: [PATCH v2 01/39] Documentation/x86: Add CET description References: <20220929222936.14584-1-rick.p.edgecombe@intel.com> <20220929222936.14584-2-rick.p.edgecombe@intel.com> Date: Mon, 10 Oct 2022 14:19:00 +0200 In-Reply-To: <20220929222936.14584-2-rick.p.edgecombe@intel.com> (Rick Edgecombe's message of "Thu, 29 Sep 2022 15:28:58 -0700") Message-ID: <87ilkr27nv.fsf@oldenburg.str.redhat.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Scanned-By: MIMEDefang 3.1 on 10.11.54.9 ARC-Authentication-Results: i=1; imf20.hostedemail.com; dkim=pass header.d=redhat.com header.s=mimecast20190719 header.b=cDFhzL4I; spf=pass (imf20.hostedemail.com: domain of fweimer@redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=fweimer@redhat.com; dmarc=pass (policy=none) header.from=redhat.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1665404353; a=rsa-sha256; cv=none; b=BWjSSS0kzln0flHIXxQTm+5htz/hcdCQoMs/gTQ5olJ6YgcbnIsNbxY9sJdY1++GxfCZq4 pHQrmKlq78yzT9u8t4wWA/wb3eqzmyIxnvdNkFvWOGgGdQDogi0xodkGSiLkDRtBT9Sb75 uzFgahJDoxDT+Ie+yJeUXNWyCYb9tLo= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1665404353; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=vuVFVTcNy3PvU+4gEYPhzjX6GgrNG/BY4EXShYmdUcQ=; b=XBftlsfPW4351T2mthPNyAVix5MG2NPmEpCB6x/fdTrtpUqGsWt2vq3pk78AA0oKL11beH x8eRc0c8DufR3FQErkw/jDw5jdKN1vPIWykkWYB4xyBWEpx2dDhQK4hdaCRdYsB5gerxPl /AuUsbRwOdwoHe74fb78iqcugsZPlhA= X-Rspamd-Queue-Id: 514BE1C0034 X-Rspam-User: Authentication-Results: imf20.hostedemail.com; dkim=pass header.d=redhat.com header.s=mimecast20190719 header.b=cDFhzL4I; spf=pass (imf20.hostedemail.com: domain of fweimer@redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=fweimer@redhat.com; dmarc=pass (policy=none) header.from=redhat.com X-Rspamd-Server: rspam10 X-Stat-Signature: ks3gpf1bjpadp6ibo9m14hk51whsnru1 X-HE-Tag: 1665404353-234261 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: * Rick Edgecombe: > +To build a CET-enabled kernel, Binutils v2.31 and GCC v8.1 or LLVM v10.0.1 > +or later are required. To build a CET-enabled application, GLIBC v2.28 or > +later is also required. Uhm, I think we are using binutils 2.30 with extra fixes. I hope that these binaries are still valid. More importantly, glibc needs to be configured with --enable-cet explicitly (unless the compiler defaults to CET). The default glibc build with a default GCC will produce dynamically-linked executables that disable CET (when running on later/differently configured glibc builds). The statically linked object files are not marked up for CET in that case. I think the goal is to support the new kernel interface for actually switching on SHSTK in glibc 2.37. But at that point, hopefully all those existing binaries can start enjoying the STSTK benefits. Thanks, Florian