Lakka-LibreELEC/projects/Generic
Rudi Heitbaum 8a0e2b2d69 linux (Generic): Enable Indirect Branch Tracking (X86_KERNEL_IBT)
Supported on Tigerlake CPUs and newer

Build the kernel with support for Indirect Branch Tracking, a
hardware support course-grain forward-edge Control Flow Integrity
protection. It enforces that all indirect calls must land on
an ENDBR instruction, as such, the compiler will instrument the
code with them to make this happen.

In addition to building the kernel with IBT, seal all functions that
are not indirect call targets, avoiding them ever becoming one.

This requires LTO like objtool runs and will slow down the build. It
does significantly reduce the number of ENDBR instructions in the
kernel image.
2022-09-05 10:58:03 +00:00
..
config ova: increase to 1gb ram 2019-01-25 12:10:59 +01:00
devices Generic/gbm: move the real device options to gbm folder 2022-05-27 01:08:03 +02:00
filesystem/usr project/Generic: added Generic-legacy to canupdate 2022-06-14 08:41:17 +00:00
kodi kodi: use project specific cputemp scripts for all projects 2018-11-02 15:53:33 +00:00
linux linux (Generic): Enable Indirect Branch Tracking (X86_KERNEL_IBT) 2022-09-05 10:58:03 +00:00
packages linux: initramfs: use initramfs config file(s) and directory structure 2020-02-26 06:42:44 +01:00
options config/arch.x86_64: updated TARGET_CPU & TARGET_FEATURES 2022-06-17 20:09:50 +02:00