stackleak: Allow runtime disabling of kernel stack erasing
Introduce CONFIG_STACKLEAK_RUNTIME_DISABLE option, which provides 'stack_erasing' sysctl. It can be used in runtime to control kernel stack erasing for kernels built with CONFIG_GCC_PLUGIN_STACKLEAK. Suggested-by:Ingo Molnar <mingo@kernel.org> Signed-off-by:
Alexander Popov <alex.popov@linux.com> Tested-by:
Laura Abbott <labbott@redhat.com> Signed-off-by:
Kees Cook <keescook@chromium.org>
Showing
- Documentation/sysctl/kernel.txt 18 additions, 0 deletionsDocumentation/sysctl/kernel.txt
- include/linux/stackleak.h 6 additions, 0 deletionsinclude/linux/stackleak.h
- kernel/stackleak.c 38 additions, 0 deletionskernel/stackleak.c
- kernel/sysctl.c 14 additions, 1 deletionkernel/sysctl.c
- scripts/gcc-plugins/Kconfig 8 additions, 0 deletionsscripts/gcc-plugins/Kconfig
Loading
Please register or sign in to comment