From patchwork Wed Jul 18 03:04:49 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Lu, Hongjiu" X-Patchwork-Id: 28448 Received: (qmail 97089 invoked by alias); 18 Jul 2018 03:04:53 -0000 Mailing-List: contact libc-alpha-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: libc-alpha-owner@sourceware.org Delivered-To: mailing list libc-alpha@sourceware.org Received: (qmail 97069 invoked by uid 89); 18 Jul 2018 03:04:52 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-25.9 required=5.0 tests=BAYES_00, GIT_PATCH_0, GIT_PATCH_1, GIT_PATCH_2, GIT_PATCH_3, KAM_LAZY_DOMAIN_SECURITY, NO_DNS_FOR_FROM autolearn=ham version=3.3.2 spammy= X-HELO: mga09.intel.com Date: Tue, 17 Jul 2018 20:04:49 -0700 From: "H.J. Lu" To: GNU C Library Subject: [PATCH] x86/CET: Document glibc.tune.x86_ibt and glibc.tune.x86_shstk Message-ID: <20180718030449.GA12416@intel.com> Reply-To: "H.J. Lu" MIME-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.10.0 (2018-05-17) OK for master? H.J. --- * manual/tunables.texi: Document glibc.tune.x86_ibt and glibc.tune.x86_shstk. --- manual/tunables.texi | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/manual/tunables.texi b/manual/tunables.texi index be33c9fc79..7998b3b7e6 100644 --- a/manual/tunables.texi +++ b/manual/tunables.texi @@ -356,3 +356,26 @@ to set threshold in bytes for non temporal store. This tunable is specific to i386 and x86-64. @end deftp + +@deftp Tunable glibc.tune.x86_ibt +The @code{glibc.tune.x86_ibt=[on|off|permissive]} tunable allows the user +to control how indirect branch tracking (IBT) should be enabled. +@code{on} always turns on IBT regardless of whether IBT is enabled in the +executable and its dependent shared libraries. @code{off} always turns +off IBT regardless of whether IBT is enabled in the executable and its +dependent shared libraries. @code{permissive} is the same as the default. + +This tunable is specific to i386 and x86-64. +@end deftp + +@deftp Tunable glibc.tune.x86_shstk +The @code{glibc.tune.x86_shstk=[on|off|permissive]} tunable allows the +user to control how shadow stack (SHSTK) should be enabled. @code{on} +always turns on SHSTK regardless of whether SHSTK is enabled in the +executable and its dependent shared libraries. @code{off} always turns +off SHSTK regardless of whether SHSTK is enabled in the executable and +its dependent shared libraries. @code{permissive} turns off SHSTK when +dlopening a legacy shared library, instead of returns an error. + +This tunable is specific to i386 and x86-64. +@end deftp