diff options
| author | Dennis Chen <dechen@redhat.com> | 2026-10-14 13:58:59 -0400 |
|---|---|---|
| committer | Kees Cook <kees@kernel.org> | 2026-10-14 13:11:13 -0700 |
| commit | e2cd253cb31bb0da4bcc512e20bfeebf76880891 (patch) | |
| tree | 2dfd53df93f8a15bd16500b9a75c8b0f94039eb0 /scripts/basic | |
| parent | ef16259088f99c5997e198561bdcbb89ab70fd0f (diff) | |
| download | linux-next-e2cd253cb31bb0da4bcc512e20bfeebf76880891.tar.gz linux-next-e2cd253cb31bb0da4bcc512e20bfeebf76880891.zip | |
lkdtm: Make UNSET_SMEP built-in-only and unexport native_write_cr4()
native_write_cr4 should not be exported to modules. Commit 21953ee5013d
("x86/cpu: Export native_write_cr4() only when CONFIG_LKTDM=m")
restricted the export somewhat, but native_write_cr4() is still exposed
to all GPL-compatible modules when CONFIG_LKDTM=m.
UNSET_SMEP is the only module user of native_write_cr4(). Restrict
the test to CONFIG_LKDTM=y and remove the export. When LKDTM is
built as a module, report XFAIL for UNSET_SMEP.
Suggested-by: Christoph Hellwig <hch@infradead.org>
Link: https://lore.kernel.org/all/20200420090102.GB24518@infradead.org/
Signed-off-by: Dennis Chen <dechen@redhat.com>
Link: https://patch.msgid.link/20261014175859.30863-1-dechen@redhat.com
Signed-off-by: Kees Cook <kees@kernel.org>
Diffstat (limited to 'scripts/basic')
0 files changed, 0 insertions, 0 deletions