Messages in this thread | | | Date | Wed, 28 Apr 2021 13:29:20 -0700 | From | Kees Cook <> | Subject | Re: [PATCH v26 1/9] x86/cet/ibt: Add Kconfig option for Indirect Branch Tracking |
| |
On Tue, Apr 27, 2021 at 01:47:12PM -0700, Yu-cheng Yu wrote: > Indirect Branch Tracking (IBT) provides protection against CALL-/JMP- > oriented programming attacks. It is active when the kernel has this > feature enabled, and the processor and the application support it. > When this feature is enabled, legacy non-IBT applications continue to > work, but without IBT protection. > > Signed-off-by: Yu-cheng Yu <yu-cheng.yu@intel.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
-- Kees Cook
| |