From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 304971CAAC for ; Thu, 16 Jan 2025 00:29:34 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1736987375; cv=none; b=Qowo1VNMv3pZTABS14wu6Y9fVHDppg7JSU64bcofECzz8dWzRo+BXZDPMMAWeDNw3oOqoCuI3XrnxVUVxxZz6UnDIGQx8Vayt1gnOxy/Vlgbjj4hq0i4cr0r+ealEIbWYl1HJdnG+VY9Olvd2z39teKX4aP2grU05eg8TCj7NjE= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1736987375; c=relaxed/simple; bh=uGSsBNxKeX7IVpiYAUp/y4tHSuNy9ylojWX0pR3FdeI=; h=Date:From:To:Cc:Subject:Message-ID:MIME-Version:Content-Type: Content-Disposition; b=rS4WCPYXMNyt8WCfYt3HI2fdmnOLxEcYwNoDyNEFFgOL0dN9zMlcNp1LuDyOQcb/TcJCjoRfNdubC7K5bY3OadcOF/hQqJBDTaEH0BY+KFovQkPJrtf8z56l10bNyWJvBPrk7CzJskdwcE3HMIN9MKKGQCF0WcCo9avL0MEMGKA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=sR/mtRLM; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="sR/mtRLM" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 9A11CC4CED1; Thu, 16 Jan 2025 00:29:34 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1736987374; bh=uGSsBNxKeX7IVpiYAUp/y4tHSuNy9ylojWX0pR3FdeI=; h=Date:From:To:Cc:Subject:From; b=sR/mtRLMNAvrtzOuFeKGmgZBLJptxNtuCnwhT4v1U1/LwfffOLbQEksUAbcGfRJUE oue+1pJ/2l1E80R6Ce5OXXsn3mnHDtZfGMNRSksfNM/o+UshYJX7A4QQNkoppDZLsV MuVxW0SGGIYbmTqCMMw4HaiuUhZeF7SK1T1Ujie1rDYLnkZiY5Clqw5svedrmFrnWC A4fl8vmGCjNoiJxef8wHyU0/ioFrY3Fs7PJyCfIKcJ+ErEnE63hx1gSeFZ2zzNCn3s iW+zOgW66XTna10KJotZA1fb8EWKCTcJ7bhbU3yEmDp/FrHODsq2bidhPg20lbxFEc Oy+ibGeAiWavQ== Date: Wed, 15 Jan 2025 16:29:32 -0800 From: Kees Cook To: Linus Torvalds Cc: linux-kernel@vger.kernel.org, Alexander Potapenko , Geert Uytterhoeven , Kees Cook , Marco Elver , Steven Rostedt , Thorsten Blum Subject: [GIT PULL] hardening updates for v6.14-rc1 Message-ID: <202501151625.F8FB6CD0A2@keescook> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Hi Linus, Please pull these few hardening updates for v6.14-rc1. The hardening tree kind of ended up being the catch-all for the tracepoint change, with the core trace change having been reviewed by Rostedt. Thanks! -Kees The following changes since commit 4bbf9020becbfd8fc2c3da790855b7042fad455b: Linux 6.13-rc4 (2024-12-22 13:22:21 -0800) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.14-rc1 for you to fetch changes up to a9a5e0bdc5a77a7c662ad4be0ad661f0b0d5e99d: hardening: Document INIT_STACK_ALL_PATTERN behavior with GCC (2025-01-08 14:17:33 -0800) ---------------------------------------------------------------- hardening updates for v6.14-rc1 - stackleak: Use str_enabled_disabled() helper (Thorsten Blum) - Document GCC INIT_STACK_ALL_PATTERN behavior (Geert Uytterhoeven) - Add task_prctl_unknown tracepoint (Marco Elver) ---------------------------------------------------------------- Geert Uytterhoeven (1): hardening: Document INIT_STACK_ALL_PATTERN behavior with GCC Marco Elver (2): tracing: Add task_prctl_unknown tracepoint tracing: Remove pid in task_rename tracing output Thorsten Blum (1): stackleak: Use str_enabled_disabled() helper in stack_erasing_sysctl() include/trace/events/task.h | 44 +++++++++++++++++++++++++++++++++++++++----- kernel/stackleak.c | 3 ++- kernel/sys.c | 3 +++ security/Kconfig.hardening | 1 + 4 files changed, 45 insertions(+), 6 deletions(-) -- Kees Cook