Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add kconfig option for Intel CET shadow stack #114

Closed
winterknife opened this issue Mar 12, 2024 · 0 comments · Fixed by #120
Closed

Add kconfig option for Intel CET shadow stack #114

winterknife opened this issue Mar 12, 2024 · 0 comments · Fixed by #120
Labels
enhancement New feature or request

Comments

@winterknife
Copy link

winterknife commented Mar 12, 2024 •
edited
Loading

Consider adding CONFIG_X86_USER_SHADOW_STACK kconfig option to enable support for userspace shadow stack on capable hardware. This is in addition to the kconfig option for enabling kernel IBT that's already implemented. This feature should be present on all 64-bit x86 CPUs since Intel TGL.

More information: https://docs.kernel.org/arch/x86/shstk.html
@a13xp0p0v a13xp0p0v added the enhancement New feature or request label Mar 17, 2024
@jvoisin jvoisin mentioned this issue Apr 15, 2024
Merged
a13xp0p0v added a commit to jvoisin/kernel-hardening-checker that referenced this issue Apr 17, 2024
@a13xp0p0v
Fix 'decision' for the X86_USER_SHADOW_STACK check
cf20e03 
Refers to a13xp0p0v#114, a13xp0p0v#120
a13xp0p0v added a commit that referenced this issue Apr 17, 2024
@a13xp0p0v
Merge branch 'shstk'
cbe604f 
Refers to #114, #120

Thanks, @jvoisin.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add a check for X86_USER_SHADOW_STACK jvoisin/kernel-hardening-checker
2 participants
@a13xp0p0v @winterknife