[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 2/2] Changelog: Add __ro_after_init and CET


  • To: Andrew Cooper <Andrew.Cooper3@xxxxxxxxxx>
  • From: Roger Pau Monné <roger.pau@xxxxxxxxxx>
  • Date: Mon, 28 Mar 2022 09:03:30 +0200
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=citrix.com; dmarc=pass action=none header.from=citrix.com; dkim=pass header.d=citrix.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=nFvd2LT4jFfFYEdYlNCSCmWKTXIj5hK2h58XsiXlaKs=; b=MNsKcyM+EiKoMjl/CQHlAZAOjjtTOSVT28OfpCt/rVPydtJEzKKIV5MxcJo/6gmDXimZFZdzAHtfF/u8YGiJIETvGcnzxgrhS3zAYffCH9rFrW87tmOKfp3ahnmIWofEKpIN190baj2eWbXdUFLzszr0cYClGdQsTbIxjrcEYdCqwv6N5dFLQh59sMrgCt5DtprnZSpDtC5/abMazoTccAJBWHZEqqlkvy3ydO+flV/G+MyFW50265gGTP8IQg2KCTq8XXZK8pLMbFjO3gTNniLiKlq53d/suhH3mngqcIlvWx3E+RrTk7821+fYDpCoCYhIV/3agjLXyWP37CR5pA==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FMMXsX86tD7GGFZkDJTA/ZziRb/cvlqDWhDLMDp25R2wWx7AzqUIRGltHoTuk6mN4ac0VkKv3pB2FxD4qHqyfJ5dyGcpN9EodEaqhvGeXbKEaUYbufvHLOOJT29+VV2jFjHGn5lOX3JjYWmjaKVUwaX4wVWbai7lnUAh9hDhH05f2kJS4uCBr38fGAB4kQWpiT9VoVyjJvDlhND8dK9v1gwEvXGE67nfTr8yymIK1Fajfok63zCeM5vTCC6XQvwpHDkicBuLD94XEfSRmkpSW2Yx0WUIh2Ho1jk4bCgta23Z48qMjDLM4+PUzMnRRb4mKmfFgGgrUkRF7SGGgeI46A==
  • Authentication-results: esa3.hc3370-68.iphmx.com; dkim=pass (signature verified) header.i=@citrix.onmicrosoft.com
  • Cc: Jan Beulich <jbeulich@xxxxxxxx>, Wei Liu <wl@xxxxxxx>, Xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • Delivery-date: Mon, 28 Mar 2022 07:03:43 +0000
  • Ironport-data: A9a23:79jMR6tBALr6xNARZdQzr0FB0ufnVEJeMUV32f8akzHdYApBsoF/q tZmKW7VaPeDNzb0f4xwb9y09BgA7JHSnYdiHQs6qi5hRX4R+JbJXdiXEBz9bniYRiHhoOOLz Cm8hv3odp1coqr0/0/1WlTZhSAgk/nOHNIQMcacUsxLbVYMpBwJ1FQyw4bVvqYy2YLjW1jX5 ouoyyHiEATNNwBcYzp8B52r8HuDjNyq0N/PlgVjDRzjlAa2e0g9VPrzF4noR5fLatA88tqBb /TC1NmEElbxpH/BPD8HfoHTKSXmSpaKVeSHZ+E/t6KK2nCurQRquko32WZ1he66RFxlkvgoo Oihu6BcRi8kGrPgwaMyeiNhDjFsGIN616PlBSCG5Jn7I03uKxMAwt1rBUAye4YZ5vx2ESdF8 vlwxDIlN07ZwbjsmfTiF7cq1p9LwMrDZevzvll6yj7UF7A+SI3rSKTW/95Imjw3g6iiGN6AO JFBMWQ0MXwsZTUQBFJLKIM1kdyqg1PiXQV+rWPPgJMotj27IAtZj+G2bYu9lsaxbdVYmAOUq 3zL+0z9AwoGL5qPxDyd6HWui+TT2yThV+o6C7mQ5vNsxlqJyQQ7ChcbSF+6qvmRkVOlVpRUL El8x8Y1hfFsrgrxFIC7BkDm5i7f1vIBZzZOO+Ae9i3UjYX92T+EFnohYAJudP4C7PZjEFTGy WS1t9/uADVutpicRnSc6qqYoFuOBMQFEYMRTXRaFFVYurEPtKl210uSFYg7TMZZm/WvQVnNL ya2QD/Sbln5peoCzO2F8F/OmFpATbCZH1dutm07so9Ihz6VhbJJhaT1sjA3Dt4ade51q2VtW lBewaByC8hUUfmweNSlGrllIV1Qz6/t3MfgqVBuBYI90D+m5mSue4tdiBknehs5bp5bI2W3O xGD0e+02HO1FCHwBUOQS9jsY/nGMIC6TYi1PhwqRoQmjmdNmP+vo3g1OB/4M5HFm0kwi6AvU ap3gu73ZUv2/Z9PlWLsL89EiOdD7nlnmQv7GMCqpzz6gOH2TCPEFt843K6mM7lRAFWs+16Or b6y9qKiln1ibQEJSnSOqddIdwFTdxDWx/ne8qRqSwJKGSI/cEkJAP7N27IxPYtjmqVejODT+ X+hHERfzTLCabfvcG1mtlgLhGvTYKtC
  • Ironport-hdrordr: A9a23:sAhjfK1yw6CtCBhVhii4JgqjBLYkLtp133Aq2lEZdPU1SL3+qy nKpp8mPHDP5Ar5NEtOpTniAsm9qBHnm6KdiLN5Vd3OYOCMggqVxe9ZnO7f6gylNyri9vNMkY dMGpIObOEY1GIK7voSNjPIceod/A==
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On Fri, Mar 25, 2022 at 04:39:30PM +0000, Andrew Cooper wrote:
> On 09/03/2022 13:03, Jan Beulich wrote:
> > On 09.03.2022 13:39, Andrew Cooper wrote:
> >> --- a/CHANGELOG.md
> >> +++ b/CHANGELOG.md
> >> @@ -6,6 +6,12 @@ The format is based on [Keep a 
> >> Changelog](https://keepachangelog.com/en/1.0.0/)
> >>  
> >>  ## [unstable 
> >> UNRELEASED](https://xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=staging)
> >>  - TBD
> >>  
> >> +### Added
> >> + - __ro_after_init support on x86, for marking data as immutable after 
> >> boot.
> > I'm not sure something like this (being an implementation detail) belongs
> > here.
> 
> Having things immutable after boot is not an implementation detail.  It
> is an important security hardening property, and deserves to be here.

The release/couuminity manager will collate the changelog and pick
which entries it finds worth adding to the release notes. I think it's
fine having this here as it might also serve for developers to be
aware of the feature and use it.

Thanks, Roger.



 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.