From: Michael Ellerman <mpe@ellerman•id.au>
To: Kees Cook <keescook@chromium•org>,
Christophe LEROY <christophe.leroy@c-s•fr>
Cc: Balbir Singh <bsingharora@gmail•com>,
Benjamin Herrenschmidt <benh@kernel•crashing.org>,
Paul Mackerras <paulus@samba•org>,
linuxppc-dev@lists•ozlabs.org, linux-kernel@vger•kernel.org
Subject: Re: [PATCH v2] powerpc: Default to enabling STRICT_KERNEL_RWX
Date: Tue, 10 Oct 2017 21:35:30 +1100 [thread overview]
Message-ID: <87infnwarx.fsf@concordia.ellerman.id.au> (raw)
In-Reply-To: <20171005190317.GA98302@beast>
Kees Cook <keescook@chromium•org> writes:
> When available, CONFIG_KERNEL_RWX should be default-enabled for PPC64.
> On PPC32, there is a performance trade-off.
Thanks for prodding us. But I think we need some more test cycles on
this before we make it the default.
As Balbir said it's currently not compatible with RELOCATABLE, which
means most folks aren't enabling it.
We also don't have good numbers on what the performance impact is on
64-bit. So although it almost certainly should be the default in future,
I'd still like us to have some idea of what it's costing us.
I'll try and get some perf numbers.
cheers
prev parent reply other threads:[~2017-10-10 10:35 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-10-05 19:03 [PATCH v2] powerpc: Default to enabling STRICT_KERNEL_RWX Kees Cook
2017-10-05 22:22 ` Balbir Singh
2017-10-10 10:35 ` Michael Ellerman [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87infnwarx.fsf@concordia.ellerman.id.au \
--to=mpe@ellerman$(echo .)id.au \
--cc=benh@kernel$(echo .)crashing.org \
--cc=bsingharora@gmail$(echo .)com \
--cc=christophe.leroy@c-s$(echo .)fr \
--cc=keescook@chromium$(echo .)org \
--cc=linux-kernel@vger$(echo .)kernel.org \
--cc=linuxppc-dev@lists$(echo .)ozlabs.org \
--cc=paulus@samba$(echo .)org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox