# git rev-parse -q --verify 8bd72f8f7c64c22a621801a76c9423932844e014^{commit} 8bd72f8f7c64c22a621801a76c9423932844e014 already have revision, skipping fetch # git checkout -q -f -B kisskb 8bd72f8f7c64c22a621801a76c9423932844e014 # git clean -qxdf # < git log -1 # commit 8bd72f8f7c64c22a621801a76c9423932844e014 # Author: Mauricio Faria de Oliveira # Date: Fri Mar 30 14:28:25 2018 -0300 # # powerpc/pseries: Restore default security feature flags on setup # # After migration the security feature flags might have changed (e.g., # destination system with unpatched firmware), but some flags are not # set/clear again in init_cpu_char_feature_flags() because it assumes # the security flags to be the defaults. # # Additionally, if the H_GET_CPU_CHARACTERISTICS hypercall fails then # init_cpu_char_feature_flags() does not run again, which potentially # might leave the system in an insecure or sub-optimal configuration. # # So, just restore the security feature flags to the defaults assumed # by init_cpu_char_feature_flags() so it can set/clear them correctly, # and to ensure safe settings are in place in case the hypercall fail. # # Fixes: f636c14790ea ("powerpc/pseries: Set or clear security feature flags") # Depends-on: 19887d6a28e2 ("powerpc: Move default security feature flags") # Signed-off-by: Mauricio Faria de Oliveira # Signed-off-by: Michael Ellerman # < /opt/cross/kisskb/gcc-5.3.0-nolibc/powerpc64-linux/bin/powerpc64-linux-gcc --version # < git log --format=%s --max-count=1 8bd72f8f7c64c22a621801a76c9423932844e014 # < make -s -j 40 ARCH=powerpc O=/kisskb/build/powerpc-next_mpc885_ads_defconfig_powerpc-5.3 CROSS_COMPILE=/opt/cross/kisskb/gcc-5.3.0-nolibc/powerpc64-linux/bin/powerpc64-linux- mpc885_ads_defconfig # make -s -j 40 ARCH=powerpc O=/kisskb/build/powerpc-next_mpc885_ads_defconfig_powerpc-5.3 CROSS_COMPILE=/opt/cross/kisskb/gcc-5.3.0-nolibc/powerpc64-linux/bin/powerpc64-linux- /kisskb/src/arch/powerpc/boot/mpc8xx.c: In function 'mpc885_get_clock': /kisskb/src/arch/powerpc/boot/mpc8xx.c:27:26: warning: variable 'div' set but not used [-Wunused-but-set-variable] int mfi, mfn, mfd, pdf, div; ^ Image Name: Linux-4.16.0-rc4-g8bd72f8 Created: Tue Apr 3 21:08:08 2018 Image Type: PowerPC Linux Kernel Image (gzip compressed) Data Size: 1861686 Bytes = 1818.05 kB = 1.78 MB Load Address: 00400000 Entry Point: 004001a8 Completed OK # rm -rf /kisskb/build/powerpc-next_mpc885_ads_defconfig_powerpc-5.3 # Build took: 0:00:25.845386