On Mon, Aug 25, 2025 at 05:01:13PM +0200, Miguel Ojeda wrote:
> On Mon, Aug 25, 2025 at 4:28 PM Kees Cook <[email protected]> wrote:
> >
> > -config CFI_CLANG
> > - bool "Use Clang's Control Flow Integrity (CFI)"
> > - depends on ARCH_SUPPORTS_CFI_CLANG
> > +config CFI
> > + bool "Use Kernel Control Flow Integrity (kCFI)"
> > + depends on ARCH_SUPPORTS_CFI
> > depends on $(cc-option,-fsanitize=kcfi)
> > help
>
> Do we need to do something to make the transition smoother, i.e.
> keeping the old one for a while to avoid a new question etc.?
Yeah, that's a good idea. What the right way to do that?
config CFI_CLANG
bool "Use Clang's Control Flow Integrity (CFI)"
depends on ARCH_SUPPORTS_CFI
select CFI
?
--
Kees Cook
