[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 2/2] Changelog: Add __ro_after_init and CET


  • To: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  • From: Jan Beulich <jbeulich@xxxxxxxx>
  • Date: Wed, 9 Mar 2022 14:03:21 +0100
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=suse.com; dmarc=pass action=none header.from=suse.com; dkim=pass header.d=suse.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=bTnYUFjMN8oXDhJmKE3Pv8nL6NANXMODzuTXiH20BCE=; b=BfxJZLAbaLgA0nYw4BBVf7JV009FjGZ5KGLoeHFl2/nJx6ZX+nIBObxlwZDOMZ4LlqhZrg86qmereDDcZX3QG2XwYeYA/HMTajDWKvg3zqYlLF/QhG/FFoX5fK7OFeFxtFg6nET+1oY2cllzN2oVWDQrtKF22rssC7LKUXReqT8Skb7ghWS2kw0Z7cCvN1/25VoU33DKWr3BjlKebdqPu/mNHeyMZNcpCrc7U0NE6yzbaO5Zk/O/LVFODLn+XQxRPwW8MqqTXmrszMUgcT2TOw/TtPYrVjxkWVvl1ZZH0ImP2lU48ei0eMebhQZ9jATUzxNUSILXrCfmuTb4YIQ8Hg==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Tmcbl+GoUH4UNw1/0p0BF7ZALDpqIiFTBgi8ecsB3cMIIENLoC8SEYvDaqD7yXqseO86K0XPVWaKm93+zLZreTtKGmyjYQWCKo7hMWA1gVdtWnQEL9/yRKdvIt1ApDEDnxbCsa9T+IIUxkCfeDS7wLYuoG1i9vH4z9GMNewcWByEhkIIvZuVeBGg6Nb8QbsSVFuY2JWVbWruEg+MmAWbuHbB5DAwH+lK1wCzzpzuq4jlgviL2x40x2edYQbDY/8w6lsAJDrXUpSw8TF50/2lqwuXayqRBPjxRP2JFO2ZU3R8YnUhtP7vqyDEdo5OKtHPJre+ypJcHFNF4bQQUEjIzA==
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=suse.com;
  • Cc: Roger Pau Monné <roger.pau@xxxxxxxxxx>, Wei Liu <wl@xxxxxxx>, Xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • Delivery-date: Wed, 09 Mar 2022 13:03:29 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On 09.03.2022 13:39, Andrew Cooper wrote:
> --- a/CHANGELOG.md
> +++ b/CHANGELOG.md
> @@ -6,6 +6,12 @@ The format is based on [Keep a 
> Changelog](https://keepachangelog.com/en/1.0.0/)
>  
>  ## [unstable 
> UNRELEASED](https://xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=staging) - 
> TBD
>  
> +### Added
> + - __ro_after_init support on x86, for marking data as immutable after boot.

I'm not sure something like this (being an implementation detail) belongs
here.

> + - Support for Xen using x86 Control Flow Enforcement technology for its own
> +   protection.  Both Shadow Stacks (ROP protection) and Indirect Branch
> +   Tracking (COP/JOP protection).

This, of course, does.

Jan




 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.