* [PATCH v2 02/10] powerpc/configs: NET_CADENCE became NET_VENDOR_CADENCE
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
@ 2020-01-21 4:29 ` Michael Ellerman
2020-01-21 4:29 ` [PATCH v2 03/10] powerpc/configs: Drop NET_VENDOR_HP which moved to staging Michael Ellerman
` (8 subsequent siblings)
9 siblings, 0 replies; 13+ messages in thread
From: Michael Ellerman @ 2020-01-21 4:29 UTC (permalink / raw)
To: linuxppc-dev; +Cc: oohall, joel, dja
The NET_CADENCE symbol was renamed to NET_VENDOR_CADENCE, so we don't
need to disable the former, see commit 0df5f81c481e ("net: ethernet:
Add missing VENDOR to Cadence and Packet Engines symbols").
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
---
arch/powerpc/configs/skiroot_defconfig | 1 -
1 file changed, 1 deletion(-)
v2: No change.
diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
index 7ff1ff1ddc28..eaaffe9ae8b9 100644
--- a/arch/powerpc/configs/skiroot_defconfig
+++ b/arch/powerpc/configs/skiroot_defconfig
@@ -138,7 +138,6 @@ CONFIG_TIGON3=m
CONFIG_BNX2X=m
# CONFIG_NET_VENDOR_BROCADE is not set
# CONFIG_NET_VENDOR_CADENCE is not set
-# CONFIG_NET_CADENCE is not set
# CONFIG_NET_VENDOR_CAVIUM is not set
CONFIG_CHELSIO_T1=m
# CONFIG_NET_VENDOR_CISCO is not set
--
2.21.1
^ permalink raw reply related [flat|nested] 13+ messages in thread* [PATCH v2 03/10] powerpc/configs: Drop NET_VENDOR_HP which moved to staging
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
2020-01-21 4:29 ` [PATCH v2 02/10] powerpc/configs: NET_CADENCE became NET_VENDOR_CADENCE Michael Ellerman
@ 2020-01-21 4:29 ` Michael Ellerman
2020-01-21 4:29 ` [PATCH v2 04/10] powerpc/configs/skiroot: Drop HID_LOGITECH Michael Ellerman
` (7 subsequent siblings)
9 siblings, 0 replies; 13+ messages in thread
From: Michael Ellerman @ 2020-01-21 4:29 UTC (permalink / raw)
To: linuxppc-dev; +Cc: oohall, joel, dja
The HP network driver moved to staging in commit 52340b82cf1a ("hp100:
Move 100BaseVG AnyLAN driver to staging") meaning we don't need to
disable it any more in our defconfigs.
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
---
arch/powerpc/configs/44x/akebono_defconfig | 1 -
arch/powerpc/configs/skiroot_defconfig | 1 -
2 files changed, 2 deletions(-)
v2: No change.
diff --git a/arch/powerpc/configs/44x/akebono_defconfig b/arch/powerpc/configs/44x/akebono_defconfig
index f0c8a07cc274..7705a5c3f4ea 100644
--- a/arch/powerpc/configs/44x/akebono_defconfig
+++ b/arch/powerpc/configs/44x/akebono_defconfig
@@ -59,7 +59,6 @@ CONFIG_BLK_DEV_SD=y
# CONFIG_NET_VENDOR_DLINK is not set
# CONFIG_NET_VENDOR_EMULEX is not set
# CONFIG_NET_VENDOR_EXAR is not set
-# CONFIG_NET_VENDOR_HP is not set
CONFIG_IBM_EMAC=y
# CONFIG_NET_VENDOR_MARVELL is not set
# CONFIG_NET_VENDOR_MELLANOX is not set
diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
index eaaffe9ae8b9..3eee39c50941 100644
--- a/arch/powerpc/configs/skiroot_defconfig
+++ b/arch/powerpc/configs/skiroot_defconfig
@@ -146,7 +146,6 @@ CONFIG_CHELSIO_T1=m
# CONFIG_NET_VENDOR_DLINK is not set
CONFIG_BE2NET=m
# CONFIG_NET_VENDOR_EZCHIP is not set
-# CONFIG_NET_VENDOR_HP is not set
# CONFIG_NET_VENDOR_HUAWEI is not set
CONFIG_E1000=m
CONFIG_E1000E=m
--
2.21.1
^ permalink raw reply related [flat|nested] 13+ messages in thread* [PATCH v2 04/10] powerpc/configs/skiroot: Drop HID_LOGITECH
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
2020-01-21 4:29 ` [PATCH v2 02/10] powerpc/configs: NET_CADENCE became NET_VENDOR_CADENCE Michael Ellerman
2020-01-21 4:29 ` [PATCH v2 03/10] powerpc/configs: Drop NET_VENDOR_HP which moved to staging Michael Ellerman
@ 2020-01-21 4:29 ` Michael Ellerman
2020-01-21 4:29 ` [PATCH v2 05/10] powerpc/configs/skiroot: Drop default n CONFIG_CRYPTO_ECHAINIV Michael Ellerman
` (6 subsequent siblings)
9 siblings, 0 replies; 13+ messages in thread
From: Michael Ellerman @ 2020-01-21 4:29 UTC (permalink / raw)
To: linuxppc-dev; +Cc: oohall, joel, dja
Commit bdd08fff4915 ("HID: logitech: Add depends on LEDS_CLASS to
Logitech Kconfig entry") made HID_LOGITECH depend on LEDS_CLASS which
we do not enable, meaning we are not actually enabling those drivers
any more.
The Kconfig help text suggests USB HID compliant Logictech devices
will continue to work without HID_LOGITECH, so just drop it.
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
---
arch/powerpc/configs/skiroot_defconfig | 1 -
1 file changed, 1 deletion(-)
v2: No change.
diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
index 3eee39c50941..74cffb854c0f 100644
--- a/arch/powerpc/configs/skiroot_defconfig
+++ b/arch/powerpc/configs/skiroot_defconfig
@@ -235,7 +235,6 @@ CONFIG_HID_CYPRESS=y
CONFIG_HID_EZKEY=y
CONFIG_HID_ITE=y
CONFIG_HID_KENSINGTON=y
-CONFIG_HID_LOGITECH=y
CONFIG_HID_MICROSOFT=y
CONFIG_HID_MONTEREY=y
CONFIG_USB_HIDDEV=y
--
2.21.1
^ permalink raw reply related [flat|nested] 13+ messages in thread* [PATCH v2 05/10] powerpc/configs/skiroot: Drop default n CONFIG_CRYPTO_ECHAINIV
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
` (2 preceding siblings ...)
2020-01-21 4:29 ` [PATCH v2 04/10] powerpc/configs/skiroot: Drop HID_LOGITECH Michael Ellerman
@ 2020-01-21 4:29 ` Michael Ellerman
2020-01-21 4:29 ` [PATCH v2 06/10] powerpc/configs/skiroot: Update for symbol movement only Michael Ellerman
` (5 subsequent siblings)
9 siblings, 0 replies; 13+ messages in thread
From: Michael Ellerman @ 2020-01-21 4:29 UTC (permalink / raw)
To: linuxppc-dev; +Cc: oohall, joel, dja
It's default n so we don't need to disable it.
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
---
arch/powerpc/configs/skiroot_defconfig | 1 -
1 file changed, 1 deletion(-)
v2: No change.
diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
index 74cffb854c0f..0aa060eef06c 100644
--- a/arch/powerpc/configs/skiroot_defconfig
+++ b/arch/powerpc/configs/skiroot_defconfig
@@ -293,5 +293,4 @@ CONFIG_WQ_WATCHDOG=y
CONFIG_XMON=y
CONFIG_XMON_DEFAULT=y
CONFIG_ENCRYPTED_KEYS=y
-# CONFIG_CRYPTO_ECHAINIV is not set
# CONFIG_CRYPTO_HW is not set
--
2.21.1
^ permalink raw reply related [flat|nested] 13+ messages in thread* [PATCH v2 06/10] powerpc/configs/skiroot: Update for symbol movement only
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
` (3 preceding siblings ...)
2020-01-21 4:29 ` [PATCH v2 05/10] powerpc/configs/skiroot: Drop default n CONFIG_CRYPTO_ECHAINIV Michael Ellerman
@ 2020-01-21 4:29 ` Michael Ellerman
2020-01-21 4:29 ` [PATCH v2 07/10] powerpc/configs/skiroot: Enable security features Michael Ellerman
` (4 subsequent siblings)
9 siblings, 0 replies; 13+ messages in thread
From: Michael Ellerman @ 2020-01-21 4:29 UTC (permalink / raw)
To: linuxppc-dev; +Cc: oohall, joel, dja
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
---
arch/powerpc/configs/skiroot_defconfig | 42 +++++++++++++-------------
1 file changed, 21 insertions(+), 21 deletions(-)
v2: No change.
diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
index 0aa060eef06c..24a210fe0049 100644
--- a/arch/powerpc/configs/skiroot_defconfig
+++ b/arch/powerpc/configs/skiroot_defconfig
@@ -1,8 +1,3 @@
-CONFIG_PPC64=y
-CONFIG_ALTIVEC=y
-CONFIG_VSX=y
-CONFIG_NR_CPUS=2048
-CONFIG_CPU_LITTLE_ENDIAN=y
CONFIG_KERNEL_XZ=y
# CONFIG_SWAP is not set
CONFIG_SYSVIPC=y
@@ -29,16 +24,11 @@ CONFIG_EXPERT=y
CONFIG_PERF_EVENTS=y
# CONFIG_COMPAT_BRK is not set
CONFIG_SLAB_FREELIST_HARDENED=y
-CONFIG_JUMP_LABEL=y
-CONFIG_STRICT_KERNEL_RWX=y
-CONFIG_MODULES=y
-CONFIG_MODULE_UNLOAD=y
-CONFIG_MODULE_SIG=y
-CONFIG_MODULE_SIG_FORCE=y
-CONFIG_MODULE_SIG_SHA512=y
-CONFIG_PARTITION_ADVANCED=y
-# CONFIG_MQ_IOSCHED_DEADLINE is not set
-# CONFIG_MQ_IOSCHED_KYBER is not set
+CONFIG_PPC64=y
+CONFIG_ALTIVEC=y
+CONFIG_VSX=y
+CONFIG_NR_CPUS=2048
+CONFIG_CPU_LITTLE_ENDIAN=y
# CONFIG_PPC_VAS is not set
# CONFIG_PPC_PSERIES is not set
# CONFIG_PPC_OF_BOOT_TRAMPOLINE is not set
@@ -49,14 +39,24 @@ CONFIG_KEXEC=y
CONFIG_PRESERVE_FA_DUMP=y
CONFIG_IRQ_ALL_CPUS=y
CONFIG_NUMA=y
-# CONFIG_COMPACTION is not set
-# CONFIG_MIGRATION is not set
CONFIG_PPC_64K_PAGES=y
CONFIG_SCHED_SMT=y
CONFIG_CMDLINE_BOOL=y
CONFIG_CMDLINE="console=tty0 console=hvc0 ipr.fast_reboot=1 quiet"
# CONFIG_SECCOMP is not set
# CONFIG_PPC_MEM_KEYS is not set
+CONFIG_JUMP_LABEL=y
+CONFIG_STRICT_KERNEL_RWX=y
+CONFIG_MODULES=y
+CONFIG_MODULE_UNLOAD=y
+CONFIG_MODULE_SIG=y
+CONFIG_MODULE_SIG_FORCE=y
+CONFIG_MODULE_SIG_SHA512=y
+CONFIG_PARTITION_ADVANCED=y
+# CONFIG_MQ_IOSCHED_DEADLINE is not set
+# CONFIG_MQ_IOSCHED_KYBER is not set
+# CONFIG_COMPACTION is not set
+# CONFIG_MIGRATION is not set
CONFIG_NET=y
CONFIG_PACKET=y
CONFIG_UNIX=y
@@ -153,7 +153,6 @@ CONFIG_IGB=m
CONFIG_IXGB=m
CONFIG_IXGBE=m
CONFIG_I40E=m
-CONFIG_S2IO=m
# CONFIG_NET_VENDOR_MARVELL is not set
CONFIG_MLX4_EN=m
# CONFIG_MLX4_CORE_GEN2 is not set
@@ -164,6 +163,7 @@ CONFIG_MLX5_CORE_EN=y
# CONFIG_NET_VENDOR_MICROSEMI is not set
CONFIG_MYRI10GE=m
# CONFIG_NET_VENDOR_NATSEMI is not set
+CONFIG_S2IO=m
# CONFIG_NET_VENDOR_NETRONOME is not set
# CONFIG_NET_VENDOR_NI is not set
# CONFIG_NET_VENDOR_NVIDIA is not set
@@ -271,6 +271,8 @@ CONFIG_NLS_CODEPAGE_437=y
CONFIG_NLS_ASCII=y
CONFIG_NLS_ISO8859_1=y
CONFIG_NLS_UTF8=y
+CONFIG_ENCRYPTED_KEYS=y
+# CONFIG_CRYPTO_HW is not set
CONFIG_CRC16=y
CONFIG_CRC_ITU_T=y
CONFIG_LIBCRC32C=y
@@ -289,8 +291,6 @@ CONFIG_BOOTPARAM_HARDLOCKUP_PANIC=y
CONFIG_WQ_WATCHDOG=y
# CONFIG_SCHED_DEBUG is not set
# CONFIG_FTRACE is not set
-# CONFIG_RUNTIME_TESTING_MENU is not set
CONFIG_XMON=y
CONFIG_XMON_DEFAULT=y
-CONFIG_ENCRYPTED_KEYS=y
-# CONFIG_CRYPTO_HW is not set
+# CONFIG_RUNTIME_TESTING_MENU is not set
--
2.21.1
^ permalink raw reply related [flat|nested] 13+ messages in thread* [PATCH v2 07/10] powerpc/configs/skiroot: Enable security features
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
` (4 preceding siblings ...)
2020-01-21 4:29 ` [PATCH v2 06/10] powerpc/configs/skiroot: Update for symbol movement only Michael Ellerman
@ 2020-01-21 4:29 ` Michael Ellerman
2020-01-23 13:38 ` Joel Stanley
2020-01-21 4:29 ` [PATCH v2 08/10] powerpc/configs/skiroot: Disable xmon default & enable reboot on panic Michael Ellerman
` (3 subsequent siblings)
9 siblings, 1 reply; 13+ messages in thread
From: Michael Ellerman @ 2020-01-21 4:29 UTC (permalink / raw)
To: linuxppc-dev; +Cc: oohall, joel, dja
From: Joel Stanley <joel@jms.id.au>
This turns on HARDENED_USERCOPY with HARDENED_USERCOPY_PAGESPAN, and
FORTIFY_SOURCE.
It also enables SECURITY_LOCKDOWN_LSM with _EARLY and
LOCK_DOWN_KERNEL_FORCE_INTEGRITY options enabled. This still allows
xmon to be used in read-only mode.
MODULE_SIG is selected by lockdown, so it is still enabled.
Signed-off-by: Joel Stanley <joel@jms.id.au>
[mpe: Switch to lockdown integrity mode per oohal]
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
---
arch/powerpc/configs/skiroot_defconfig | 11 ++++++++++-
1 file changed, 10 insertions(+), 1 deletion(-)
v2: Switch to lockdown integrity mode rather than confidentiality as noticed by
dja and discussed with jms and oohal.
diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
index 24a210fe0049..93b478436a2b 100644
--- a/arch/powerpc/configs/skiroot_defconfig
+++ b/arch/powerpc/configs/skiroot_defconfig
@@ -49,7 +49,6 @@ CONFIG_JUMP_LABEL=y
CONFIG_STRICT_KERNEL_RWX=y
CONFIG_MODULES=y
CONFIG_MODULE_UNLOAD=y
-CONFIG_MODULE_SIG=y
CONFIG_MODULE_SIG_FORCE=y
CONFIG_MODULE_SIG_SHA512=y
CONFIG_PARTITION_ADVANCED=y
@@ -272,6 +271,16 @@ CONFIG_NLS_ASCII=y
CONFIG_NLS_ISO8859_1=y
CONFIG_NLS_UTF8=y
CONFIG_ENCRYPTED_KEYS=y
+CONFIG_SECURITY=y
+CONFIG_HARDENED_USERCOPY=y
+# CONFIG_HARDENED_USERCOPY_FALLBACK is not set
+CONFIG_HARDENED_USERCOPY_PAGESPAN=y
+CONFIG_FORTIFY_SOURCE=y
+CONFIG_SECURITY_LOCKDOWN_LSM=y
+CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
+CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
+# CONFIG_INTEGRITY is not set
+CONFIG_LSM="yama,loadpin,safesetid,integrity"
# CONFIG_CRYPTO_HW is not set
CONFIG_CRC16=y
CONFIG_CRC_ITU_T=y
--
2.21.1
^ permalink raw reply related [flat|nested] 13+ messages in thread* Re: [PATCH v2 07/10] powerpc/configs/skiroot: Enable security features
2020-01-21 4:29 ` [PATCH v2 07/10] powerpc/configs/skiroot: Enable security features Michael Ellerman
@ 2020-01-23 13:38 ` Joel Stanley
2020-01-29 1:29 ` Daniel Axtens
0 siblings, 1 reply; 13+ messages in thread
From: Joel Stanley @ 2020-01-23 13:38 UTC (permalink / raw)
To: Michael Ellerman; +Cc: linuxppc-dev, Oliver O'Halloran, Daniel Axtens
On Tue, 21 Jan 2020 at 04:30, Michael Ellerman <mpe@ellerman.id.au> wrote:
>
> From: Joel Stanley <joel@jms.id.au>
>
> This turns on HARDENED_USERCOPY with HARDENED_USERCOPY_PAGESPAN, and
> FORTIFY_SOURCE.
>
> It also enables SECURITY_LOCKDOWN_LSM with _EARLY and
> LOCK_DOWN_KERNEL_FORCE_INTEGRITY options enabled. This still allows
> xmon to be used in read-only mode.
>
> MODULE_SIG is selected by lockdown, so it is still enabled.
>
> Signed-off-by: Joel Stanley <joel@jms.id.au>
> [mpe: Switch to lockdown integrity mode per oohal]
> Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
I did some testing and with change we break kexec. As it's critical
for this kernel to be able to kexec we need to set KEXEC_FILE=y if
we're setting FORCE_INTEGRITY=y.
I've tested your series with that modification made and userspace was
once again able to kexec (with -s).
Cheers,
Joel
> ---
> arch/powerpc/configs/skiroot_defconfig | 11 ++++++++++-
> 1 file changed, 10 insertions(+), 1 deletion(-)
>
> v2: Switch to lockdown integrity mode rather than confidentiality as noticed by
> dja and discussed with jms and oohal.
>
> diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
> index 24a210fe0049..93b478436a2b 100644
> --- a/arch/powerpc/configs/skiroot_defconfig
> +++ b/arch/powerpc/configs/skiroot_defconfig
> @@ -49,7 +49,6 @@ CONFIG_JUMP_LABEL=y
> CONFIG_STRICT_KERNEL_RWX=y
> CONFIG_MODULES=y
> CONFIG_MODULE_UNLOAD=y
> -CONFIG_MODULE_SIG=y
> CONFIG_MODULE_SIG_FORCE=y
> CONFIG_MODULE_SIG_SHA512=y
> CONFIG_PARTITION_ADVANCED=y
> @@ -272,6 +271,16 @@ CONFIG_NLS_ASCII=y
> CONFIG_NLS_ISO8859_1=y
> CONFIG_NLS_UTF8=y
> CONFIG_ENCRYPTED_KEYS=y
> +CONFIG_SECURITY=y
> +CONFIG_HARDENED_USERCOPY=y
> +# CONFIG_HARDENED_USERCOPY_FALLBACK is not set
> +CONFIG_HARDENED_USERCOPY_PAGESPAN=y
> +CONFIG_FORTIFY_SOURCE=y
> +CONFIG_SECURITY_LOCKDOWN_LSM=y
> +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
> +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
> +# CONFIG_INTEGRITY is not set
> +CONFIG_LSM="yama,loadpin,safesetid,integrity"
> # CONFIG_CRYPTO_HW is not set
> CONFIG_CRC16=y
> CONFIG_CRC_ITU_T=y
> --
> 2.21.1
>
^ permalink raw reply [flat|nested] 13+ messages in thread
* Re: [PATCH v2 07/10] powerpc/configs/skiroot: Enable security features
2020-01-23 13:38 ` Joel Stanley
@ 2020-01-29 1:29 ` Daniel Axtens
0 siblings, 0 replies; 13+ messages in thread
From: Daniel Axtens @ 2020-01-29 1:29 UTC (permalink / raw)
To: Joel Stanley, Michael Ellerman; +Cc: linuxppc-dev, Oliver O'Halloran
Joel Stanley <joel@jms.id.au> writes:
> On Tue, 21 Jan 2020 at 04:30, Michael Ellerman <mpe@ellerman.id.au> wrote:
>>
>> From: Joel Stanley <joel@jms.id.au>
>>
>> This turns on HARDENED_USERCOPY with HARDENED_USERCOPY_PAGESPAN, and
>> FORTIFY_SOURCE.
>>
>> It also enables SECURITY_LOCKDOWN_LSM with _EARLY and
>> LOCK_DOWN_KERNEL_FORCE_INTEGRITY options enabled. This still allows
>> xmon to be used in read-only mode.
>>
>> MODULE_SIG is selected by lockdown, so it is still enabled.
>>
>> Signed-off-by: Joel Stanley <joel@jms.id.au>
>> [mpe: Switch to lockdown integrity mode per oohal]
>> Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
>
> I did some testing and with change we break kexec. As it's critical
> for this kernel to be able to kexec we need to set KEXEC_FILE=y if
> we're setting FORCE_INTEGRITY=y.
>
> I've tested your series with that modification made and userspace was
> once again able to kexec (with -s).
Has the changes that enable this landed in kexec-lite and petitboot yet?
I had to manually patch them when I was experimenting with it
recently...
Regards,
Daniel
>
> Cheers,
>
> Joel
>
>> ---
>> arch/powerpc/configs/skiroot_defconfig | 11 ++++++++++-
>> 1 file changed, 10 insertions(+), 1 deletion(-)
>>
>> v2: Switch to lockdown integrity mode rather than confidentiality as noticed by
>> dja and discussed with jms and oohal.
>>
>> diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
>> index 24a210fe0049..93b478436a2b 100644
>> --- a/arch/powerpc/configs/skiroot_defconfig
>> +++ b/arch/powerpc/configs/skiroot_defconfig
>> @@ -49,7 +49,6 @@ CONFIG_JUMP_LABEL=y
>> CONFIG_STRICT_KERNEL_RWX=y
>> CONFIG_MODULES=y
>> CONFIG_MODULE_UNLOAD=y
>> -CONFIG_MODULE_SIG=y
>> CONFIG_MODULE_SIG_FORCE=y
>> CONFIG_MODULE_SIG_SHA512=y
>> CONFIG_PARTITION_ADVANCED=y
>> @@ -272,6 +271,16 @@ CONFIG_NLS_ASCII=y
>> CONFIG_NLS_ISO8859_1=y
>> CONFIG_NLS_UTF8=y
>> CONFIG_ENCRYPTED_KEYS=y
>> +CONFIG_SECURITY=y
>> +CONFIG_HARDENED_USERCOPY=y
>> +# CONFIG_HARDENED_USERCOPY_FALLBACK is not set
>> +CONFIG_HARDENED_USERCOPY_PAGESPAN=y
>> +CONFIG_FORTIFY_SOURCE=y
>> +CONFIG_SECURITY_LOCKDOWN_LSM=y
>> +CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
>> +CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
>> +# CONFIG_INTEGRITY is not set
>> +CONFIG_LSM="yama,loadpin,safesetid,integrity"
>> # CONFIG_CRYPTO_HW is not set
>> CONFIG_CRC16=y
>> CONFIG_CRC_ITU_T=y
>> --
>> 2.21.1
>>
^ permalink raw reply [flat|nested] 13+ messages in thread
* [PATCH v2 08/10] powerpc/configs/skiroot: Disable xmon default & enable reboot on panic
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
` (5 preceding siblings ...)
2020-01-21 4:29 ` [PATCH v2 07/10] powerpc/configs/skiroot: Enable security features Michael Ellerman
@ 2020-01-21 4:29 ` Michael Ellerman
2020-01-21 4:29 ` [PATCH v2 09/10] powerpc/configs/skiroot: Enable some more hardening options Michael Ellerman
` (2 subsequent siblings)
9 siblings, 0 replies; 13+ messages in thread
From: Michael Ellerman @ 2020-01-21 4:29 UTC (permalink / raw)
To: linuxppc-dev; +Cc: oohall, joel, dja
If the skiroot kernel crashes we don't want it sitting at an xmon
prompt forever. Instead it's more helpful to reboot and bring the
boot loader back up, and if the crash was transient we can then boot
successfully.
Similarly if we panic we should reboot, with a short timeout in case
someone is watching the console.
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
---
arch/powerpc/configs/skiroot_defconfig | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
v2: No change.
diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
index 93b478436a2b..28cfd68e8b16 100644
--- a/arch/powerpc/configs/skiroot_defconfig
+++ b/arch/powerpc/configs/skiroot_defconfig
@@ -29,6 +29,7 @@ CONFIG_ALTIVEC=y
CONFIG_VSX=y
CONFIG_NR_CPUS=2048
CONFIG_CPU_LITTLE_ENDIAN=y
+CONFIG_PANIC_TIMEOUT=30
# CONFIG_PPC_VAS is not set
# CONFIG_PPC_PSERIES is not set
# CONFIG_PPC_OF_BOOT_TRAMPOLINE is not set
@@ -293,6 +294,7 @@ CONFIG_LIBCRC32C=y
CONFIG_PRINTK_TIME=y
CONFIG_MAGIC_SYSRQ=y
CONFIG_DEBUG_STACKOVERFLOW=y
+CONFIG_PANIC_ON_OOPS=y
CONFIG_SOFTLOCKUP_DETECTOR=y
CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC=y
CONFIG_HARDLOCKUP_DETECTOR=y
@@ -301,5 +303,4 @@ CONFIG_WQ_WATCHDOG=y
# CONFIG_SCHED_DEBUG is not set
# CONFIG_FTRACE is not set
CONFIG_XMON=y
-CONFIG_XMON_DEFAULT=y
# CONFIG_RUNTIME_TESTING_MENU is not set
--
2.21.1
^ permalink raw reply related [flat|nested] 13+ messages in thread* [PATCH v2 09/10] powerpc/configs/skiroot: Enable some more hardening options
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
` (6 preceding siblings ...)
2020-01-21 4:29 ` [PATCH v2 08/10] powerpc/configs/skiroot: Disable xmon default & enable reboot on panic Michael Ellerman
@ 2020-01-21 4:29 ` Michael Ellerman
2020-01-21 4:30 ` [PATCH v2 10/10] powerpc/configs/skiroot: Enable CONFIG_PRINTK_CALLER Michael Ellerman
2020-02-04 12:01 ` [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
9 siblings, 0 replies; 13+ messages in thread
From: Michael Ellerman @ 2020-01-21 4:29 UTC (permalink / raw)
To: linuxppc-dev; +Cc: oohall, joel, dja
Enable more hardening options.
Note BUG_ON_DATA_CORRUPTION selects DEBUG_LIST and is essentially just
a synonym for it.
DEBUG_SG, DEBUG_NOTIFIERS, DEBUG_LIST, DEBUG_CREDENTIALS and
SCHED_STACK_END_CHECK should all be low overhead and just add a few
extra checks.
SLAB_FREELIST_RANDOM, and SLUB_DEBUG_ON will add some overhead to the
SLAB allocator, but nothing that should be meaningful for skiroot.
Unselecting SLAB_MERGE_DEFAULT causes the SLAB to use more memory, but
the skiroot kernel shouldn't be memory constrained on any of our
systems, all it does is run a small bootloader.
Disabling merging has some security/robustness benefit as it means a
user-after-free or overflow will be limited to the objects in that
slab, rather than potentially affecting objects from unrelated slabs
that have been merged.
Note also that slab merging is disabled anyway by enabling
SLUB_DEBUG_ON, because of the SLAB_NEVER_MERGE mask.
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
---
arch/powerpc/configs/skiroot_defconfig | 8 ++++++++
1 file changed, 8 insertions(+)
v2: Add more explanation about slab merging.
diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
index 28cfd68e8b16..ca6f1842aa29 100644
--- a/arch/powerpc/configs/skiroot_defconfig
+++ b/arch/powerpc/configs/skiroot_defconfig
@@ -23,6 +23,8 @@ CONFIG_EXPERT=y
# CONFIG_AIO is not set
CONFIG_PERF_EVENTS=y
# CONFIG_COMPAT_BRK is not set
+# CONFIG_SLAB_MERGE_DEFAULT is not set
+CONFIG_SLAB_FREELIST_RANDOM=y
CONFIG_SLAB_FREELIST_HARDENED=y
CONFIG_PPC64=y
CONFIG_ALTIVEC=y
@@ -293,6 +295,8 @@ CONFIG_LIBCRC32C=y
# CONFIG_XZ_DEC_SPARC is not set
CONFIG_PRINTK_TIME=y
CONFIG_MAGIC_SYSRQ=y
+CONFIG_SLUB_DEBUG_ON=y
+CONFIG_SCHED_STACK_END_CHECK=y
CONFIG_DEBUG_STACKOVERFLOW=y
CONFIG_PANIC_ON_OOPS=y
CONFIG_SOFTLOCKUP_DETECTOR=y
@@ -301,6 +305,10 @@ CONFIG_HARDLOCKUP_DETECTOR=y
CONFIG_BOOTPARAM_HARDLOCKUP_PANIC=y
CONFIG_WQ_WATCHDOG=y
# CONFIG_SCHED_DEBUG is not set
+CONFIG_DEBUG_SG=y
+CONFIG_DEBUG_NOTIFIERS=y
+CONFIG_BUG_ON_DATA_CORRUPTION=y
+CONFIG_DEBUG_CREDENTIALS=y
# CONFIG_FTRACE is not set
CONFIG_XMON=y
# CONFIG_RUNTIME_TESTING_MENU is not set
--
2.21.1
^ permalink raw reply related [flat|nested] 13+ messages in thread* [PATCH v2 10/10] powerpc/configs/skiroot: Enable CONFIG_PRINTK_CALLER
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
` (7 preceding siblings ...)
2020-01-21 4:29 ` [PATCH v2 09/10] powerpc/configs/skiroot: Enable some more hardening options Michael Ellerman
@ 2020-01-21 4:30 ` Michael Ellerman
2020-02-04 12:01 ` [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
9 siblings, 0 replies; 13+ messages in thread
From: Michael Ellerman @ 2020-01-21 4:30 UTC (permalink / raw)
To: linuxppc-dev; +Cc: oohall, joel, dja
This adds the CPU or thread number to printk messages. This can help
decipher concurrent oopses that have been interleaved.
Example output, of PID1 (T1) triggering a warning:
[ 1.581678][ T1] WARNING: CPU: 0 PID: 1 at crypto/rsa-pkcs1pad.c:539 pkcs1pad_verify+0x38/0x140
[ 1.581681][ T1] Modules linked in:
[ 1.581693][ T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.5.0-rc5-gcc-8.2.0-00121-gf84c2e595927-dirty #1515
[ 1.581700][ T1] NIP: c000000000207d64 LR: c000000000207d3c CTR: c000000000207d2c
[ 1.581708][ T1] REGS: c0000000fd2e7560 TRAP: 0700 Not tainted (5.5.0-rc5-gcc-8.2.0-00121-gf84c2e595927-dirty)
[ 1.581712][ T1] MSR: 9000000000029033 <SF,HV,EE,ME,IR,DR,RI,LE> CR: 44000222 XER: 00040000
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
---
arch/powerpc/configs/skiroot_defconfig | 1 +
1 file changed, 1 insertion(+)
v2: New.
diff --git a/arch/powerpc/configs/skiroot_defconfig b/arch/powerpc/configs/skiroot_defconfig
index ca6f1842aa29..ae1d7137a84e 100644
--- a/arch/powerpc/configs/skiroot_defconfig
+++ b/arch/powerpc/configs/skiroot_defconfig
@@ -294,6 +294,7 @@ CONFIG_LIBCRC32C=y
# CONFIG_XZ_DEC_ARMTHUMB is not set
# CONFIG_XZ_DEC_SPARC is not set
CONFIG_PRINTK_TIME=y
+CONFIG_PRINTK_CALLER=y
CONFIG_MAGIC_SYSRQ=y
CONFIG_SLUB_DEBUG_ON=y
CONFIG_SCHED_STACK_END_CHECK=y
--
2.21.1
^ permalink raw reply related [flat|nested] 13+ messages in thread* Re: [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging
2020-01-21 4:29 [PATCH v2 01/10] powerpc/configs: Drop CONFIG_QLGE which moved to staging Michael Ellerman
` (8 preceding siblings ...)
2020-01-21 4:30 ` [PATCH v2 10/10] powerpc/configs/skiroot: Enable CONFIG_PRINTK_CALLER Michael Ellerman
@ 2020-02-04 12:01 ` Michael Ellerman
9 siblings, 0 replies; 13+ messages in thread
From: Michael Ellerman @ 2020-02-04 12:01 UTC (permalink / raw)
To: Michael Ellerman, linuxppc-dev; +Cc: oohall, joel, dja
On Tue, 2020-01-21 at 04:29:51 UTC, Michael Ellerman wrote:
> The QLGE driver moved to staging in commit 955315b0dc8c ("qlge: Move
> drivers/net/ethernet/qlogic/qlge/ to drivers/staging/qlge/"), meaning
> our defconfigs that enable it have no effect as we don't enable
> CONFIG_STAGING.
>
> It sounds like the device is obsolete, so drop the driver.
>
> Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Patches 1-9 applied to powerpc next.
https://git.kernel.org/powerpc/c/76e4bd93369b87d97c2b1bcd6e754a89f422235b
cheers
^ permalink raw reply [flat|nested] 13+ messages in thread