module: Add retpoline tag to VERMAGIC
authorAndi Kleen <ak@linux.intel.com>
Tue, 16 Jan 2018 20:52:28 +0000 (12:52 -0800)
committerThomas Gleixner <tglx@linutronix.de>
Wed, 17 Jan 2018 10:35:14 +0000 (11:35 +0100)
commit6cfb521ac0d5b97470883ff9b7facae264b7ab12
tree308539da33db9990f05a420f25c9aea01f70c650
parent4fdec2034b7540dda461c6ba33325dfcff345c64
module: Add retpoline tag to VERMAGIC

Add a marker for retpoline to the module VERMAGIC. This catches the case
when a non RETPOLINE compiled module gets loaded into a retpoline kernel,
making it insecure.

It doesn't handle the case when retpoline has been runtime disabled.  Even
in this case the match of the retcompile status will be enforced.  This
implies that even with retpoline run time disabled all modules loaded need
to be recompiled.

Signed-off-by: Andi Kleen <ak@linux.intel.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Acked-by: David Woodhouse <dwmw@amazon.co.uk>
Cc: rusty@rustcorp.com.au
Cc: arjan.van.de.ven@intel.com
Cc: jeyu@kernel.org
Cc: torvalds@linux-foundation.org
Link: https://lkml.kernel.org/r/20180116205228.4890-1-andi@firstfloor.org
include/linux/vermagic.h