9009b455 - .gitignore: prefix local generated files with a slash

Fri, 30 Apr 2021 02:03:08 +0000

.gitignore: prefix local generated files with a slashThe pattern prefixed with '/' matches files in the same directory,but not ones in sub-directories.Signed-off-by: Masahiro Yamada Acked-by: Miguel Ojeda Acked-by: Rob Herring Acked-by: Andra Paraschiv Acked-by: Greg Kroah-Hartman Acked-by: Gabriel Krisman Bertazi List of files: /linux-6.15/scripts/gcc-plugins/.gitignore

d198b34f - .gitignore: add SPDX License Identifier

Tue, 03 Mar 2020 13:35:59 +0000

.gitignore: add SPDX License IdentifierAdd SPDX License Identifier to all .gitignore files.Signed-off-by: Masahiro Yamada Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/scripts/gcc-plugins/.gitignore

313dd1b6 - gcc-plugins: Add the randstruct plugin

Sat, 06 May 2017 06:37:45 +0000

gcc-plugins: Add the randstruct pluginThis randstruct plugin is modified from Brad Spengler/PaX Team's codein the last public patch of grsecurity/PaX based on my understandingof the code. Changes or omissions from the original code are mine anddon't reflect the original grsecurity/PaX code.The randstruct GCC plugin randomizes the layout of selected structuresat compile time, as a probabilistic defense against attacks that need toknow the layout of structures within the kernel. This is most useful for"in-house" kernel builds where neither the randomization seed nor otherbuild artifacts are made available to an attacker. While less useful fordistribution kernels (where the randomization seed must be exposed forthird party kernel module builds), it still has some value there since nowall kernel builds would need to be tracked by an attacker.In more performance sensitive scenarios, GCC_PLUGIN_RANDSTRUCT_PERFORMANCEcan be selected to make a best effort to restrict randomization tocacheline-sized groups of elements, and will not randomize bitfields. Thiscomes at the cost of reduced randomization.Two annotations are defined,__randomize_layout and __no_randomize_layout,which respectively tell the plugin to either randomize or not torandomize instances of the struct in question. Follow-on patches enablethe auto-detection logic for selecting structures for randomizationthat contain only function pointers. It is disabled here to assist withbisection.Since any randomized structs must be initialized using designatedinitializers, __randomize_layout includes the __designated_init annotationeven when the plugin is disabled so that all builds will requirethe needed initialization. (With the plugin enabled, annotations forautomatically chosen structures are marked as well.)The main differences between this implemenation and grsecurity are:- disable automatic struct selection (to be enabled in follow-up patch)- add designated_init attribute at runtime and for manual marking- clarify debugging output to differentiate bad cast warnings- add whitelisting infrastructure- support gcc 7's DECL_ALIGN and DECL_MODE changes (Laura Abbott)- raise minimum required GCC version to 4.7Earlier versions of this patch series were ported by Michael Leibowitz.Signed-off-by: Kees Cook List of files: /linux-6.15/scripts/gcc-plugins/.gitignore

Changes in .gitignore

9009b455 - .gitignore: prefix local generated files with a slash

d198b34f - .gitignore: add SPDX License Identifier

313dd1b6 - gcc-plugins: Add the randstruct plugin