linux-kernel - Re: [PATCH v4 00/16] x86-64: Stack protector and percpu improvements

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAFULd4biN8FPRtU54Q0QywfBFvvWV-s1M3kWF9YOmozyAX9+ZQ@mail.gmail.com>
Date: Tue, 26 Mar 2024 08:02:33 +0100
From: Uros Bizjak <ubizjak@...il.com>
To: Arnd Bergmann <arnd@...db.de>
Cc: Takashi Iwai <tiwai@...e.de>, Linus Torvalds <torvalds@...ux-foundation.org>, 
	Brian Gerst <brgerst@...il.com>, linux-kernel@...r.kernel.org, x86@...nel.org, 
	Ingo Molnar <mingo@...nel.org>, Thomas Gleixner <tglx@...utronix.de>, Borislav Petkov <bp@...en8.de>, 
	"H. Peter Anvin" <hpa@...or.com>, mwilck@...e.com, Vlastimil Babka <vbabka@...e.cz>, denis.kirjanov@...e.com, 
	nmorey@...e.com
Subject: Re: [PATCH v4 00/16] x86-64: Stack protector and percpu improvements

On Mon, Mar 25, 2024 at 7:08 PM Arnd Bergmann <arnd@...db.de> wrote:
>
> On Mon, Mar 25, 2024, at 16:26, Takashi Iwai wrote:
> > On Mon, 25 Mar 2024 15:51:30 +0100, Arnd Bergmann wrote:
> >
> >> Not sure if they plan to update the kernel release beyond that,
> >> or how inconvenient it would be for them to require
> >> using the other compiler for future updates, so I've added
> >> the developers that last touched the OpenSUSE kernel RPM
> >> package to Cc here.
> >
> > SLE15-SP6 kernel (based on 6.4.x) is still built with gcc7, currently
> > gcc 7.5, indeed.  openSUSE Leap shares the very same kernel, so it's
> > with gcc 7.5, too.  Even though gcc-13 is provided as additional
> > compiler package, it's not used for the kernel package build.
>
> Ok, so for SP6 there won't be a problem because it won't
> update the kernel.
>
> > AFAIK, it's not decided yet about SP7 kernel.  But since we take a
> > conservative approach for SLE, I guess SLE15-SP7 will be likely
> > sticking with the old gcc, unless forced to change by some reason.
>
> From https://www.suse.com/support/kb/doc/?id=000019587, it
> looks like kernel versions are historically only updated for
> even numbered updates (SP2, SP4, SP6), so I guess there is a
> good chance that SP7 won't upgrade either, even if that decision
> is still to be made.
>
> I would assume that if SP7 does get a new kernel, it would
> not be any later than the next LTS kernel (6.12 according
> to phb-crystal-ball), and we could just decide to move to
> gcc-8 only after that is out.

I think that upgrading the compiler to 8.1 after 6.12 LTS is a good plan.

Following that plan also means that the original stack protector
improvement series that includes objtool changes is the way to go
forward. The stack protector specific part can be removed from objtool
after the compiler is upgraded.

Thanks,
Uros.