linux-kernel - Re: x86/umip: Enable User-Mode Instruction Prevention at runtime

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20171127033608.GA22924@codemonkey.org.uk>
Date:   Sun, 26 Nov 2017 22:36:09 -0500
From:   Dave Jones <davej@...emonkey.org.uk>
To:     Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Cc:     Ingo Molnar <mingo@...nel.org>,
        Ricardo Neri <ricardo.neri-calderon@...ux.intel.com>
Subject: Re: x86/umip: Enable User-Mode Instruction Prevention at runtime

On Mon, Nov 13, 2017 at 11:44:02PM +0000, Linux Kernel wrote:
 > Web:        https://git.kernel.org/torvalds/c/aa35f896979d9610bb11df485cf7bb6ca241febb
 > Commit:     aa35f896979d9610bb11df485cf7bb6ca241febb
 > Parent:     c6a960bbf6a36572a06bde866d94a7338c7f256a
 > Refname:    refs/heads/master
 > Author:     Ricardo Neri <ricardo.neri-calderon@...ux.intel.com>
 > AuthorDate: Sun Nov 5 18:27:54 2017 -0800
 > Committer:  Ingo Molnar <mingo@...nel.org>
 > CommitDate: Wed Nov 8 11:16:23 2017 +0100
 > 
 >     x86/umip: Enable User-Mode Instruction Prevention at runtime
 

 > +config X86_INTEL_UMIP
 > +	def_bool n
 > +	depends on CPU_SUP_INTEL
 > +	prompt "Intel User Mode Instruction Prevention" if EXPERT
 > +	---help---
 > +	  The User Mode Instruction Prevention (UMIP) is a security
 > +	  feature in newer Intel processors.

Can we start defining which CPU generation features appear in in Kconfigs ?

In six months time, "newer" will mean even less than it does today.

It'd be nice to be able to answer oldconfig without having to look
things up in the SDM.

	Dave