[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 2/2] Changelog: Add __ro_after_init and CET
- To: Andrew Cooper <Andrew.Cooper3@xxxxxxxxxx>
- From: Roger Pau Monné <roger.pau@xxxxxxxxxx>
- Date: Mon, 28 Mar 2022 09:03:30 +0200
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=citrix.com; dmarc=pass action=none header.from=citrix.com; dkim=pass header.d=citrix.com; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=nFvd2LT4jFfFYEdYlNCSCmWKTXIj5hK2h58XsiXlaKs=; b=MNsKcyM+EiKoMjl/CQHlAZAOjjtTOSVT28OfpCt/rVPydtJEzKKIV5MxcJo/6gmDXimZFZdzAHtfF/u8YGiJIETvGcnzxgrhS3zAYffCH9rFrW87tmOKfp3ahnmIWofEKpIN190baj2eWbXdUFLzszr0cYClGdQsTbIxjrcEYdCqwv6N5dFLQh59sMrgCt5DtprnZSpDtC5/abMazoTccAJBWHZEqqlkvy3ydO+flV/G+MyFW50265gGTP8IQg2KCTq8XXZK8pLMbFjO3gTNniLiKlq53d/suhH3mngqcIlvWx3E+RrTk7821+fYDpCoCYhIV/3agjLXyWP37CR5pA==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FMMXsX86tD7GGFZkDJTA/ZziRb/cvlqDWhDLMDp25R2wWx7AzqUIRGltHoTuk6mN4ac0VkKv3pB2FxD4qHqyfJ5dyGcpN9EodEaqhvGeXbKEaUYbufvHLOOJT29+VV2jFjHGn5lOX3JjYWmjaKVUwaX4wVWbai7lnUAh9hDhH05f2kJS4uCBr38fGAB4kQWpiT9VoVyjJvDlhND8dK9v1gwEvXGE67nfTr8yymIK1Fajfok63zCeM5vTCC6XQvwpHDkicBuLD94XEfSRmkpSW2Yx0WUIh2Ho1jk4bCgta23Z48qMjDLM4+PUzMnRRb4mKmfFgGgrUkRF7SGGgeI46A==
- Authentication-results: esa3.hc3370-68.iphmx.com; dkim=pass (signature verified) header.i=@citrix.onmicrosoft.com
- Cc: Jan Beulich <jbeulich@xxxxxxxx>, Wei Liu <wl@xxxxxxx>, Xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxxx>
- Delivery-date: Mon, 28 Mar 2022 07:03:43 +0000
- Ironport-data: A9a23:79jMR6tBALr6xNARZdQzr0FB0ufnVEJeMUV32f8akzHdYApBsoF/q tZmKW7VaPeDNzb0f4xwb9y09BgA7JHSnYdiHQs6qi5hRX4R+JbJXdiXEBz9bniYRiHhoOOLz Cm8hv3odp1coqr0/0/1WlTZhSAgk/nOHNIQMcacUsxLbVYMpBwJ1FQyw4bVvqYy2YLjW1jX5 ouoyyHiEATNNwBcYzp8B52r8HuDjNyq0N/PlgVjDRzjlAa2e0g9VPrzF4noR5fLatA88tqBb /TC1NmEElbxpH/BPD8HfoHTKSXmSpaKVeSHZ+E/t6KK2nCurQRquko32WZ1he66RFxlkvgoo Oihu6BcRi8kGrPgwaMyeiNhDjFsGIN616PlBSCG5Jn7I03uKxMAwt1rBUAye4YZ5vx2ESdF8 vlwxDIlN07ZwbjsmfTiF7cq1p9LwMrDZevzvll6yj7UF7A+SI3rSKTW/95Imjw3g6iiGN6AO JFBMWQ0MXwsZTUQBFJLKIM1kdyqg1PiXQV+rWPPgJMotj27IAtZj+G2bYu9lsaxbdVYmAOUq 3zL+0z9AwoGL5qPxDyd6HWui+TT2yThV+o6C7mQ5vNsxlqJyQQ7ChcbSF+6qvmRkVOlVpRUL El8x8Y1hfFsrgrxFIC7BkDm5i7f1vIBZzZOO+Ae9i3UjYX92T+EFnohYAJudP4C7PZjEFTGy WS1t9/uADVutpicRnSc6qqYoFuOBMQFEYMRTXRaFFVYurEPtKl210uSFYg7TMZZm/WvQVnNL ya2QD/Sbln5peoCzO2F8F/OmFpATbCZH1dutm07so9Ihz6VhbJJhaT1sjA3Dt4ade51q2VtW lBewaByC8hUUfmweNSlGrllIV1Qz6/t3MfgqVBuBYI90D+m5mSue4tdiBknehs5bp5bI2W3O xGD0e+02HO1FCHwBUOQS9jsY/nGMIC6TYi1PhwqRoQmjmdNmP+vo3g1OB/4M5HFm0kwi6AvU ap3gu73ZUv2/Z9PlWLsL89EiOdD7nlnmQv7GMCqpzz6gOH2TCPEFt843K6mM7lRAFWs+16Or b6y9qKiln1ibQEJSnSOqddIdwFTdxDWx/ne8qRqSwJKGSI/cEkJAP7N27IxPYtjmqVejODT+ X+hHERfzTLCabfvcG1mtlgLhGvTYKtC
- Ironport-hdrordr: A9a23:sAhjfK1yw6CtCBhVhii4JgqjBLYkLtp133Aq2lEZdPU1SL3+qy nKpp8mPHDP5Ar5NEtOpTniAsm9qBHnm6KdiLN5Vd3OYOCMggqVxe9ZnO7f6gylNyri9vNMkY dMGpIObOEY1GIK7voSNjPIceod/A==
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
On Fri, Mar 25, 2022 at 04:39:30PM +0000, Andrew Cooper wrote:
> On 09/03/2022 13:03, Jan Beulich wrote:
> > On 09.03.2022 13:39, Andrew Cooper wrote:
> >> --- a/CHANGELOG.md
> >> +++ b/CHANGELOG.md
> >> @@ -6,6 +6,12 @@ The format is based on [Keep a
> >> Changelog](https://keepachangelog.com/en/1.0.0/)
> >>
> >> ## [unstable
> >> UNRELEASED](https://xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=staging)
> >> - TBD
> >>
> >> +### Added
> >> + - __ro_after_init support on x86, for marking data as immutable after
> >> boot.
> > I'm not sure something like this (being an implementation detail) belongs
> > here.
>
> Having things immutable after boot is not an implementation detail. It
> is an important security hardening property, and deserves to be here.
The release/couuminity manager will collate the changelog and pick
which entries it finds worth adding to the release notes. I think it's
fine having this here as it might also serve for developers to be
aware of the feature and use it.
Thanks, Roger.
|