linux-kernel - Re: [PATCH v4] x86/efi: Implement support for embedding SBAT data for x86

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAMj1kXHPvqaF3VK3E5HbvrChQ2iCqDRhkP6M25xAWaprx-XcxQ@mail.gmail.com>
Date: Sat, 21 Jun 2025 10:23:11 +0200
From: Ard Biesheuvel <ardb@...nel.org>
To: Vitaly Kuznetsov <vkuznets@...hat.com>
Cc: x86@...nel.org, linux-efi@...r.kernel.org, 
	Thomas Gleixner <tglx@...utronix.de>, Ingo Molnar <mingo@...hat.com>, 
	Dave Hansen <dave.hansen@...ux.intel.com>, "H. Peter Anvin" <hpa@...or.com>, 
	Borislav Petkov <bp@...en8.de>, Peter Jones <pjones@...hat.com>, Daniel Berrange <berrange@...hat.com>, 
	Emanuele Giuseppe Esposito <eesposit@...hat.com>, Gerd Hoffmann <kraxel@...hat.com>, 
	Greg KH <gregkh@...uxfoundation.org>, Luca Boccassi <bluca@...ian.org>, 
	Peter Zijlstra <peterz@...radead.org>, Matthew Garrett <mjg59@...f.ucam.org>, 
	James Bottomley <James.Bottomley@...senpartnership.com>, 
	Eric Snowberg <eric.snowberg@...cle.com>, linux-kernel@...r.kernel.org
Subject: Re: [PATCH v4] x86/efi: Implement support for embedding SBAT data for x86

On Thu, 19 Jun 2025 at 17:18, Vitaly Kuznetsov <vkuznets@...hat.com> wrote:
>
> Similar to zboot architectures, implement support for embedding SBAT data
> for x86. Put '.sbat' section in between '.data' and '.text' as the former
> also covers '.bss' and '.pgtable' and thus must be the last one in the
> file.
>
> Signed-off-by: Vitaly Kuznetsov <vkuznets@...hat.com>
> ---
> Changes since v3:
> - Update optional PE header so .sbat is accounted in
> 'SizeOfInitializedData' and not in 'SizeOfCode'.

As discussed in the other thread [0], let's not fiddle with these
fields - they aren't actually used anywhere.

So, Boris, Ingo, Dave, mind applying the v3 [1] of this patch? It
already has my R-b

Thanks,

[0] https://lore.kernel.org/linux-efi/871preptml.fsf@redhat.com/T/#t
[1] https://lore.kernel.org/linux-efi/877c17pxsz.fsf@redhat.com/T/#t