Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Deepin-Kernel-SIG] [linux-6.6.y] config: Enable LIST_HARDENED #481

Merged
merged 4 commits into from
Nov 19, 2024

Conversation

opsiff
Copy link
Member

@opsiff opsiff commented Nov 19, 2024

Linux kernel 6.6 introduced CONFIG_LIST_HARDENED, of which CONFIG_DEBUG_LIST is a superset [1]. Since CONFIG_DEBUG_LIST selects CONFIG_LIST_HARDENED, configs that already selected CONFIG_DEBUG_LIST were not prompted for CONFIG_LIST_HARDENED.
Since CONFIG_DEBUG_LIST has never been designed with performance in mind, non-debug kernels should prefer CONFIG_LIST_HARDENED. The main benefit is improved performance; the only downside is slightly worse error reporting (the WARNING is turned into an access fault in some cases). Hardening-wise there is no functional difference.
[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=aebc7b0d8d91bbc69e976909963046bc48bca4fd

Link: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/26

Linux kernel 6.6 introduced CONFIG_LIST_HARDENED, of which CONFIG_DEBUG_LIST is a superset [1]. Since CONFIG_DEBUG_LIST selects CONFIG_LIST_HARDENED, configs that already selected CONFIG_DEBUG_LIST were not prompted for CONFIG_LIST_HARDENED.
Since CONFIG_DEBUG_LIST has never been designed with performance in mind, non-debug kernels should prefer CONFIG_LIST_HARDENED. The main benefit is improved performance; the only downside is slightly worse error reporting (the WARNING is turned into an access fault in some cases). Hardening-wise there is no functional difference.
[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=aebc7b0d8d91bbc69e976909963046bc48bca4fd

Link: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/26
Linux kernel 6.6 introduced CONFIG_LIST_HARDENED, of which CONFIG_DEBUG_LIST is a superset [1]. Since CONFIG_DEBUG_LIST selects CONFIG_LIST_HARDENED, configs that already selected CONFIG_DEBUG_LIST were not prompted for CONFIG_LIST_HARDENED.
Since CONFIG_DEBUG_LIST has never been designed with performance in mind, non-debug kernels should prefer CONFIG_LIST_HARDENED. The main benefit is improved performance; the only downside is slightly worse error reporting (the WARNING is turned into an access fault in some cases). Hardening-wise there is no functional difference.
[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=aebc7b0d8d91bbc69e976909963046bc48bca4fd

Link: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/26
Linux kernel 6.6 introduced CONFIG_LIST_HARDENED, of which CONFIG_DEBUG_LIST is a superset [1]. Since CONFIG_DEBUG_LIST selects CONFIG_LIST_HARDENED, configs that already selected CONFIG_DEBUG_LIST were not prompted for CONFIG_LIST_HARDENED.
Since CONFIG_DEBUG_LIST has never been designed with performance in mind, non-debug kernels should prefer CONFIG_LIST_HARDENED. The main benefit is improved performance; the only downside is slightly worse error reporting (the WARNING is turned into an access fault in some cases). Hardening-wise there is no functional difference.
[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=aebc7b0d8d91bbc69e976909963046bc48bca4fd

Link: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/26
@deepin-ci-robot
Copy link

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from opsiff. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@opsiff opsiff merged commit 034c60f into linux-6.6.y Nov 19, 2024
7 of 10 checks passed
@opsiff opsiff deleted the opsiff-config branch November 19, 2024 13:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants