Re: [PATCH] slab: Decouple slab_debug and no_hash_pointers

2025-04-15 Thread Kees Cook
On Mon, Apr 14, 2025 at 02:31:42PM +0200, Petr Mladek wrote: > On Thu 2025-04-10 10:44:31, Kees Cook wrote: > > Some system owners use slab_debug=FPZ (or similar) as a hardening option, > > but do not want to be forced into having kernel addresses exposed due > > to the implicit "no_hash_pointers"

Re: [PATCH] slab: Decouple slab_debug and no_hash_pointers

2025-04-14 Thread Petr Mladek
On Thu 2025-04-10 10:44:31, Kees Cook wrote: > Some system owners use slab_debug=FPZ (or similar) as a hardening option, > but do not want to be forced into having kernel addresses exposed due > to the implicit "no_hash_pointers" boot param setting.[1] > > Introduce the "hash_pointers" boot param,

Re: [PATCH] slab: Decouple slab_debug and no_hash_pointers

2025-04-13 Thread David Rientjes
On Thu, 10 Apr 2025, Kees Cook wrote: > Some system owners use slab_debug=FPZ (or similar) as a hardening option, > but do not want to be forced into having kernel addresses exposed due > to the implicit "no_hash_pointers" boot param setting.[1] > > Introduce the "hash_pointers" boot param, which

Re: [PATCH] slab: Decouple slab_debug and no_hash_pointers

2025-04-13 Thread Bagas Sanjaya
On Thu, Apr 10, 2025 at 10:44:31AM -0700, Kees Cook wrote: > Some system owners use slab_debug=FPZ (or similar) as a hardening option, > but do not want to be forced into having kernel addresses exposed due > to the implicit "no_hash_pointers" boot param setting.[1] > > Introduce the "hash_pointer

Re: [PATCH] slab: Decouple slab_debug and no_hash_pointers

2025-04-11 Thread Vlastimil Babka
On 4/10/25 19:44, Kees Cook wrote: > Some system owners use slab_debug=FPZ (or similar) as a hardening option, > but do not want to be forced into having kernel addresses exposed due > to the implicit "no_hash_pointers" boot param setting.[1] > > Introduce the "hash_pointers" boot param, which def

[PATCH] slab: Decouple slab_debug and no_hash_pointers

2025-04-10 Thread Kees Cook
Some system owners use slab_debug=FPZ (or similar) as a hardening option, but do not want to be forced into having kernel addresses exposed due to the implicit "no_hash_pointers" boot param setting.[1] Introduce the "hash_pointers" boot param, which defaults to "auto" (the current behavior), but a