# git rev-parse -q --verify 8bd72f8f7c64c22a621801a76c9423932844e014^{commit} 8bd72f8f7c64c22a621801a76c9423932844e014 already have revision, skipping fetch # git checkout -q -f -B kisskb 8bd72f8f7c64c22a621801a76c9423932844e014 # git clean -qxdf # < git log -1 # commit 8bd72f8f7c64c22a621801a76c9423932844e014 # Author: Mauricio Faria de Oliveira # Date: Fri Mar 30 14:28:25 2018 -0300 # # powerpc/pseries: Restore default security feature flags on setup # # After migration the security feature flags might have changed (e.g., # destination system with unpatched firmware), but some flags are not # set/clear again in init_cpu_char_feature_flags() because it assumes # the security flags to be the defaults. # # Additionally, if the H_GET_CPU_CHARACTERISTICS hypercall fails then # init_cpu_char_feature_flags() does not run again, which potentially # might leave the system in an insecure or sub-optimal configuration. # # So, just restore the security feature flags to the defaults assumed # by init_cpu_char_feature_flags() so it can set/clear them correctly, # and to ensure safe settings are in place in case the hypercall fail. # # Fixes: f636c14790ea ("powerpc/pseries: Set or clear security feature flags") # Depends-on: 19887d6a28e2 ("powerpc: Move default security feature flags") # Signed-off-by: Mauricio Faria de Oliveira # Signed-off-by: Michael Ellerman # < /opt/cross/kisskb/gcc-5.3.0-nolibc/powerpc64-linux/bin/powerpc64-linux-gcc --version # < git log --format=%s --max-count=1 8bd72f8f7c64c22a621801a76c9423932844e014 # < make -s -j 48 ARCH=powerpc O=/kisskb/build/powerpc-next_ppc64_defconfig+NO_KVM_powerpc-5.3 CROSS_COMPILE=/opt/cross/kisskb/gcc-5.3.0-nolibc/powerpc64-linux/bin/powerpc64-linux- ppc64_defconfig # Added to kconfig CONFIG_KVM_BOOK3S_64=n # Added to kconfig CONFIG_KVM=n # yes \n | make -s -j 48 ARCH=powerpc O=/kisskb/build/powerpc-next_ppc64_defconfig+NO_KVM_powerpc-5.3 CROSS_COMPILE=/opt/cross/kisskb/gcc-5.3.0-nolibc/powerpc64-linux/bin/powerpc64-linux- oldconfig yes: standard output: Broken pipe yes: write error # make -s -j 48 ARCH=powerpc O=/kisskb/build/powerpc-next_ppc64_defconfig+NO_KVM_powerpc-5.3 CROSS_COMPILE=/opt/cross/kisskb/gcc-5.3.0-nolibc/powerpc64-linux/bin/powerpc64-linux- WARNING: modpost: Found 2 section mismatch(es). To see full details build your kernel with: 'make CONFIG_DEBUG_SECTION_MISMATCH=y' Completed OK # rm -rf /kisskb/build/powerpc-next_ppc64_defconfig+NO_KVM_powerpc-5.3 # Build took: 0:02:57.551278