Kees Cook 7660a6fddc mm: allow slab_nomerge to be set at build time ... Some hardened environments want to build kernels with slab_nomerge already set (so that they do not depend on remembering to set the kernel command line option). This is desired to reduce the risk of kernel heap overflows being able to overwrite objects from merged caches and changes the requirements for cache layout control, increasing the difficulty of these attacks. By keeping caches unmerged, these kinds of exploits can usually only damage objects in the same cache (though the risk to metadata exploitation is unchanged). Link: http://lkml.kernel.org/r/20170620230911.GA25238@beast Signed-off-by: Kees Cook <keescook@chromium.org> Cc: Daniel Micay <danielmicay@gmail.com> Cc: David Windsor <dave@nullcore.net> Cc: Eric Biggers <ebiggers3@gmail.com> Cc: Christoph Lameter <cl@linux.com> Cc: Jonathan Corbet <corbet@lwn.net> Cc: Daniel Micay <danielmicay@gmail.com> Cc: David Windsor <dave@nullcore.net> Cc: Eric Biggers <ebiggers3@gmail.com> Cc: Pekka Enberg <penberg@kernel.org> Cc: David Rientjes <rientjes@google.com> Cc: Joonsoo Kim <iamjoonsoo.kim@lge.com> Cc: "Rafael J. Wysocki" <rafael.j.wysocki@intel.com> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: Ingo Molnar <mingo@kernel.org> Cc: Mauro Carvalho Chehab <mchehab@kernel.org> Cc: "Paul E. McKenney" <paulmck@linux.vnet.ibm.com> Cc: Arnd Bergmann <arnd@arndb.de> Cc: Andy Lutomirski <luto@kernel.org> Cc: Nicolas Pitre <nicolas.pitre@linaro.org> Cc: Tejun Heo <tj@kernel.org> Cc: Daniel Mack <daniel@zonque.org> Cc: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Cc: Sergey Senozhatsky <sergey.senozhatsky@gmail.com> Cc: Helge Deller <deller@gmx.de> Cc: Rik van Riel <riel@redhat.com> Cc: Randy Dunlap <rdunlap@infradead.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2017-07-06 16:24:31 -07:00
..
ABI	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-07-05 12:31:59 -07:00
EDID	…
PCI	docs: update old references for DocBook from the documentation	2017-05-16 08:44:19 -03:00
RCU	rcu: Remove debugfs tracing	2017-06-08 18:52:43 -07:00
accounting	…
acpi	Merge branches 'acpi-button' and 'acpi-tools'	2017-05-22 20:29:06 +02:00
admin-guide	mm: allow slab_nomerge to be set at build time	2017-07-06 16:24:31 -07:00
aoe	…
arm	ARM: at91: Documentation: add armv7m families	2017-06-02 10:11:09 +02:00
arm64	arm64: documentation: document tagged pointer stack constraints	2017-05-09 17:43:18 +01:00
auxdisplay	…
backlight	…
blackfin	…
block	block: remove bio_clone() and all references.	2017-06-18 12:40:59 -06:00
blockdev	remove the mg_disk driver	2017-04-14 14:00:49 -06:00
bus-devices	…
cdrom	…
cgroup-v1	…
cma	…
connector	…
console	…
core-api	There has been a fair amount of activity in the docs tree this time	2017-07-03 21:13:25 -07:00
cpu-freq	cpufreq: intel_pstate: Document the current behavior and user interface	2017-05-14 02:06:03 +02:00
cpuidle	…
cris	…
crypto	Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2017-07-05 12:22:23 -07:00
dev-tools	There has been a fair amount of activity in the docs tree this time	2017-07-03 21:13:25 -07:00
device-mapper	- A major update for DM cache that reduces the latency for deciding	2017-05-03 10:31:20 -07:00
devicetree	Merge branch 'for-4.13' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata	2017-07-06 09:41:58 -07:00
dmaengine	…
doc-guide	kernel-doc: describe the ``literal`` syntax	2017-05-16 08:44:24 -03:00
driver-api	There has been a fair amount of activity in the docs tree this time	2017-07-03 21:13:25 -07:00
driver-model	Char/Misc patches for 4.13-rc1	2017-07-03 20:55:59 -07:00
early-userspace	…
extcon	…
fault-injection	…
fb	docs: update old references for DocBook from the documentation	2017-05-16 08:44:19 -03:00
features	powerpc updates for 4.12 part 1.	2017-05-05 11:36:44 -07:00
filesystems	There has been a fair amount of activity in the docs tree this time	2017-07-03 21:13:25 -07:00
firmware_class	…
fmc	…
fpga	…
frv	…
gpio	…
gpu	docs: update old references for DocBook from the documentation	2017-05-16 08:44:19 -03:00
hid	…
hwmon	hwmon: (pmbus) move header file out of I2C realm	2017-06-11 17:08:19 -07:00
i2c	…
ia64	…
ide	…
iio	…
infiniband	IB/opa-vnic: Virtual Network Interface Controller (VNIC) documentation	2017-04-20 12:01:06 -04:00
input	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input	2017-05-26 16:45:13 -07:00
ioctl	TEE driver infrastructure and OP-TEE drivers	2017-05-10 11:20:09 -07:00
isdn	…
kbuild	Documentation, kbuild: fix typo "minimun" -> "minimum"	2017-05-18 10:49:44 -06:00
kdump	…
kernel-hacking	There has been a fair amount of activity in the docs tree this time	2017-07-03 21:13:25 -07:00
laptops	…
leds	…
lightnvm	lightnvm: physical block device (pblk) target	2017-04-16 10:06:33 -06:00
livepatch	…
locking	…
m68k	…
md	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/shli/md	2017-05-03 10:05:38 -07:00
media	Docs: Use kernel-figure in vidioc-g-selection.rst	2017-06-23 13:45:56 -06:00
memory-devices	…
metag	…
mic	…
mips	…
misc-devices	Documentation: misc-devices: Add Documentation for pci-endpoint-test driver	2017-04-28 10:23:19 -05:00
mmc	MMC core:	2017-05-02 17:34:32 -07:00
mn10300	…
mtd	…
namespaces	…
netlabel	…
networking	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-07-05 12:31:59 -07:00
nfc	…
nios2	…
nvdimm	…
nvmem	…
parisc	…
pcmcia	…
perf	…
phy	…
platform	…
power	power supply and reset changes for the v4.13 series	2017-07-04 14:25:14 -07:00
powerpc	powerpc/fadump: update documentation about crashkernel parameter reuse	2017-05-08 17:15:11 -07:00
pps	…
process	doc: Document suitability of IBM Verse for kernel development	2017-06-22 10:22:41 -06:00
pti	…
ptp	…
rapidio	…
s390	…
scheduler	sched/deadline: Add documentation about GRUB reclaiming	2017-06-08 10:31:56 +02:00
scsi	…
security	docs: Fix some formatting issues in request-key.rst	2017-05-18 10:46:25 -06:00
serial	tty: n_gsm: do not send/receive in ldisc close path	2017-06-03 18:48:52 +09:00
sh	docs-rst: convert sh book to ReST	2017-05-16 08:44:18 -03:00
sound	There has been a fair amount of activity in the docs tree this time	2017-07-03 21:13:25 -07:00
sparc	…
sphinx	Docs: clean up some DocBook loose ends	2017-06-23 14:17:38 -06:00
sphinx-static	…
spi	spi: Document SPI slave controller support	2017-05-26 13:11:00 +01:00
sysctl	Replace 2 jiffies with sysctl netdev_budget_usecs to enable softirq tuning	2017-04-21 13:22:34 -04:00
target	Documentation/target: add an example script to configure an iSCSI target	2017-05-01 22:21:35 -07:00
thermal	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux	2017-05-12 11:58:45 -07:00
timers	rcu: Eliminate NOCBs CPU-state Kconfig options	2017-06-08 18:52:43 -07:00
trace	Char/Misc patches for 4.13-rc1	2017-07-03 20:55:59 -07:00
translations	doc/kokr/howto: Only send regression fixes after -rc1	2017-06-22 10:25:22 -06:00
usb	usb: gadget: add f_uac1 variant based on a new u_audio api	2017-06-19 09:22:47 +03:00
userspace-api	doc: ReSTify no_new_privs.txt	2017-05-18 10:30:09 -06:00
virtual	Second round of KVM/ARM Changes for v4.12.	2017-05-09 12:51:49 +02:00
vm	Documentation/vm/transhuge.txt: fix trivial typos	2017-05-08 17:15:14 -07:00
w1	…
watchdog	iTCO_wdt: all versions count down twice	2017-05-19 10:42:11 +02:00
wimax	…
x86	x86/mce: Update bootlog description to reflect behavior on AMD	2017-06-14 07:32:10 +02:00
xtensa	…
.gitignore	…
00-INDEX	Merge remote-tracking branch 'mauro-exp/docbook3' into death-to-docbook	2017-05-18 11:03:08 -06:00
Changes	…
CodingStyle	…
DMA-API-HOWTO.txt	…
DMA-API.txt	Documentation: DMA API: fix a typo in a function name	2017-06-05 15:57:02 -06:00
DMA-ISA-LPC.txt	…
DMA-attributes.txt	…
IPMI.txt	…
IRQ-affinity.txt	…
IRQ-domain.txt	Documentation: Update IRQ-domain.txt to document irq_domain_mapping	2017-05-22 22:29:45 +02:00
IRQ.txt	…
Intel-IOMMU.txt	…
Makefile	docs: remove DocBook from the building system	2017-05-16 08:44:19 -03:00
SAK.txt	…
SM501.txt	…
SubmittingPatches	…
bcache.txt	…
bt8xxgpio.txt	…
btmrvl.txt	…
bus-virt-phys-mapping.txt	…
cachetlb.txt	…
cgroup-v2.txt	cgroup: implement "nsdelegate" mount option	2017-06-28 14:45:21 -04:00
circular-buffers.txt	…
clk.txt	…
conf.py	Docs: Fix breakage with Sphinx 1.5 and upper	2017-06-23 13:45:37 -06:00
cpu-load.txt	…
cputopology.txt	docs: Fix a couple typos	2017-04-27 15:54:39 -06:00
crc32.txt	…
dcdbas.txt	…
debugging-modules.txt	…
debugging-via-ohci1394.txt	docs: Fix a couple typos	2017-04-27 15:54:39 -06:00
dell_rbu.txt	…
digsig.txt	…
docutils.conf	…
dontdiff	GCC plugin updates:	2017-07-05 11:46:59 -07:00
efi-stub.txt	…
eisa.txt	…
flexible-arrays.txt	…
futex-requeue-pi.txt	…
gcc-plugins.txt	…
highuid.txt	…
hw_random.txt	…
hwspinlock.txt	…
index.rst	Make the main documentation title less Geocities	2017-06-23 14:02:27 -06:00
intel_txt.txt	…
io-mapping.txt	…
io_ordering.txt	…
iostats.txt	…
irqflags-tracing.txt	…
isa.txt	…
isapnp.txt	…
kernel-doc-nano-HOWTO.txt	docs: update old references for DocBook from the documentation	2017-05-16 08:44:19 -03:00
kernel-per-CPU-kthreads.txt	rcu: Eliminate NOCBs CPU-state Kconfig options	2017-06-08 18:52:43 -07:00
kobject.txt	…
kprobes.txt	…
kref.txt	…
kselftest.txt	…
ldm.txt	…
lockup-watchdogs.txt	…
logo.gif	…
logo.txt	…
lsm.txt	docs-rst: convert lsm from DocBook to ReST	2017-05-16 08:44:19 -03:00
lzo.txt	…
mailbox.txt	…
memory-barriers.txt	There has been a fair amount of activity in the docs tree this time	2017-07-03 21:13:25 -07:00
memory-hotplug.txt	…
men-chameleon-bus.txt	…
nommu-mmap.txt	…
ntb.txt	…
numastat.txt	…
padata.txt	…
parport-lowlevel.txt	…
percpu-rw-semaphore.txt	…
phy.txt	…
pi-futex.txt	…
pinctrl.txt	…
pnp.txt	…
preempt-locking.txt	…
printk-formats.txt	…
pwm.txt	…
rbtree.txt	…
remoteproc.txt	…
rfkill.txt	…
robust-futex-ABI.txt	…
robust-futexes.txt	…
rpmsg.txt	…
rtc.txt	…
sgi-ioc4.txt	…
siphash.txt	…
smsc_ece1099.txt	…
static-keys.txt	docs: Fix a couple typos	2017-04-27 15:54:39 -06:00
svga.txt	…
switchtec.txt	switchtec: Add IOCTLs to the Switchtec driver	2017-04-12 12:23:37 -05:00
sync_file.txt	…
tee.txt	…
this_cpu_ops.txt	…
unaligned-memory-access.txt	…
vfio-mediated-device.txt	docs: Fix a spelling error in vfio-mediated-device.txt	2017-04-27 15:54:39 -06:00
vfio.txt	…
video-output.txt	…
xillybus.txt	…
xz.txt	…
zorro.txt	docs: Fix a couple typos	2017-04-27 15:54:39 -06:00