lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:   Wed, 7 Mar 2018 13:55:53 +0100 (CET)
From:   Jiri Kosina <jikos@...nel.org>
To:     Pavel Tatashin <pasha.tatashin@...cle.com>
cc:     steven.sistare@...cle.com, daniel.m.jordan@...cle.com,
        linux-kernel@...r.kernel.org, Alexander.Levin@...rosoft.com,
        dan.j.williams@...el.com, sathyanarayanan.kuppuswamy@...el.com,
        pankaj.laxminarayan.bharadiya@...el.com, akuster@...sta.com,
        Corey Minyard <cminyard@...sta.com>,
        gregkh@...uxfoundation.org, stable@...r.kernel.org,
        Hugh Dickins <hughd@...gle.com>,
        Miroslav Benes <mbenes@...e.cz>
Subject: Re: [PATCH 4.1 00/65] page table isolation for stable 4.1


[ adding Hugh and Miroslav to CC ]

On Mon, 5 Mar 2018, Pavel Tatashin wrote:

> The git of this backport can be found here:
> git clone --branch pti_v4.1.49 https://github.com/soleen/linux
> 
> The patches were backported from stable 4.4 to Oracle UEK4.1, and from
> UEK4.1 to Stable 4.1

You'd want to consider also taking trampoline stack entry patches we 
currently are putting into SLE12-SP[23] kernel tree [1], which also bases 
on the original Hugh's 4.4 port.

I've notified Greg already that trampoline stack entry should be put into 
4.4-stable proper as well, but that hasn't happened yet.

[1] you can find those on https://kernel.suse.com/; the patches that are 
    currently in (commits 6d3ee9dc14bafff and f7de61af517916 in 
    kernel-source.git there) do pass the usual battery of PTI testing.
    There will be some changes made to it to avoid external module ABI
    breakage, but those will not be picked up by stable I guess, and you
    probably don't care either.

-- 
Jiri Kosina
SUSE Labs

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ