Re: [PATCH v3 07/16] lkdtm: Disable UNSET_SMEP with CFI

From: Kees Cook
Date: Tue Sep 14 2021 - 15:30:35 EST


On Tue, Sep 14, 2021 at 12:10:36PM -0700, Sami Tolvanen wrote:
> Disable the UNSET_SMEP test when CONFIG_CFI_CLANG is enabled as
> jumping to a call gadget would always trip CFI instead.
>
> Signed-off-by: Sami Tolvanen <samitolvanen@xxxxxxxxxx>

Yeah, (thankfully) this test can't work sanely under CFI.

Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>

--
Kees Cook