[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1012222: linux: please enable the CONFIG_X86_KERNEL_IBT configuration option



Version: 6.3.1-1~exp1

Hi Laurent,

Le 2022-06-01 18:53, Laurent Bonnaud a écrit :
> Package: src:linux
> Version: 5.18.0-trunk
> Severity: wishlist
> 
> 
> Dear kernel Maintainers,
> 
> the CONFIG_X86_KERNEL_IBT configuration option is currently not enabled in Debian kernels:
> 
> $ grep CONFIG_X86_KERNEL_IBT /boot/config*
> /boot/config-5.18.0-trunk-amd64:# CONFIG_X86_KERNEL_IBT is not set
> /boot/config-5.18.0-trunk-rt-amd64:# CONFIG_X86_KERNEL_IBT is not set
> 
> It is an important protection against ROP/JOP attacks.  Could you please enable it in Debian kernels?

Let's close this report since kernel IBT is enabled by default starting with
Linux 6.2+ [1].
 
> Thanks,
> 
> -- 
> Laurent.
 
Cheers,
Vincent

[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4fd5f70ce14da230c6a29648c3d51a48ee0b4bfd

Attachment: signature.asc
Description: PGP signature


Reply to: