From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: From: Roland Hieber Date: Sun, 30 Aug 2020 23:32:02 +0200 Message-Id: <20200830213203.15562-6-rhi@pengutronix.de> In-Reply-To: <20200830213203.15562-1-rhi@pengutronix.de> References: <20200830213203.15562-1-rhi@pengutronix.de> MIME-Version: 1.0 Subject: [DistroKit] [PATCH 5/6] v8a: update to OSELAS.Toolchain 2020.08.0 List-Id: DistroKit Mailinglist List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: distrokit-bounces@pengutronix.de Sender: "DistroKit" To: distrokit@pengutronix.de Cc: Roland Hieber Update to the latest toolchain, which was released this week. Updating to GCC 10 prompts for new kernel options: | CONFIG_ARM64_PTR_AUTH: | | Pointer authentication (part of the ARMv8.3 Extensions) provides | instructions for signing and authenticating pointers against secret | keys, which can be used to mitigate Return Oriented Programming (ROP) | and other attacks. | | This option enables these instructions at EL0 (i.e. for userspace). | Choosing this option will cause the kernel to initialise secret keys | for each process at exec() time, with these keys being | context-switched along with the process. | | If the compiler supports the -mbranch-protection or | -msign-return-address flag (e.g. GCC 7 or later), then this option | will also cause the kernel itself to be compiled with return address | protection. In this case, and if the target hardware is known to | support pointer authentication, then CONFIG_STACKPROTECTOR can be | disabled with minimal loss of protection. | | The feature is detected at runtime. If the feature is not present in | hardware it will not be advertised to userspace/KVM guest nor will it | be enabled. However, KVM guest also require VHE mode and hence | CONFIG_ARM64_VHE=y option to use this feature. | | If the feature is present on the boot CPU but not on a late CPU, then | the late CPU will be parked. Also, if the boot CPU does not have | address auth and the late CPU has then the late CPU will still boot | but with the feature disabled. On such a system, this option should | not be selected. | | This feature works with FUNCTION_GRAPH_TRACER option only if | DYNAMIC_FTRACE_WITH_REGS is enabled. | CONFIG_ARM64_BTI_KERNEL: | | Build the kernel with Branch Target Identification annotations | and enable enforcement of this for kernel code. When this option | is enabled and the system supports BTI all kernel code including | modular code must have BTI enabled. Use their default values for enhanced security. Signed-off-by: Roland Hieber --- configs/platform-v8a/kernelconfig | 9 ++++++--- configs/platform-v8a/platformconfig | 6 +++--- 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/configs/platform-v8a/kernelconfig b/configs/platform-v8a/kernelconfig index 0f77dd0f11d8..5a2b6791768c 100644 --- a/configs/platform-v8a/kernelconfig +++ b/configs/platform-v8a/kernelconfig @@ -2,10 +2,10 @@ # Automatically generated file; DO NOT EDIT. # Linux/arm64 5.8 Kernel Configuration # -CONFIG_CC_VERSION_TEXT="aarch64-v8a-linux-gnu-gcc (OSELAS.Toolchain-2019.09.1 9-20191130) 9.2.1 20191130" +CONFIG_CC_VERSION_TEXT="aarch64-v8a-linux-gnu-gcc (OSELAS.Toolchain-2020.08.0 10-20200822) 10.2.1 20200822" CONFIG_CC_IS_GCC=y -CONFIG_GCC_VERSION=90201 -CONFIG_LD_VERSION=232000000 +CONFIG_GCC_VERSION=100201 +CONFIG_LD_VERSION=235000000 CONFIG_CLANG_VERSION=0 CONFIG_CC_CAN_LINK=y CONFIG_CC_CAN_LINK_STATIC=y @@ -426,9 +426,11 @@ CONFIG_ARM64_CNP=y # # ARMv8.3 architectural features # +CONFIG_ARM64_PTR_AUTH=y CONFIG_CC_HAS_BRANCH_PROT_PAC_RET=y CONFIG_CC_HAS_SIGN_RETURN_ADDRESS=y CONFIG_AS_HAS_PAC=y +CONFIG_AS_HAS_CFI_NEGATE_RA_STATE=y # end of ARMv8.3 architectural features # @@ -441,6 +443,7 @@ CONFIG_ARM64_AMU_EXTN=y # ARMv8.5 architectural features # CONFIG_ARM64_BTI=y +CONFIG_ARM64_BTI_KERNEL=y CONFIG_CC_HAS_BRANCH_PROT_PAC_RET_BTI=y CONFIG_ARM64_E0PD=y CONFIG_ARCH_RANDOM=y diff --git a/configs/platform-v8a/platformconfig b/configs/platform-v8a/platformconfig index 32e08456f815..4a929a0ac655 100644 --- a/configs/platform-v8a/platformconfig +++ b/configs/platform-v8a/platformconfig @@ -61,11 +61,11 @@ PTXCONF_SYSROOT_CROSS="${PTXDIST_PLATFORMDIR}/sysroot-cross" # # toolchain # -PTXCONF_CROSSCHAIN_VENDOR="OSELAS.Toolchain-2019.09" -PTXCONF_CROSSCHAIN_CHECK="9.2.1" +PTXCONF_CROSSCHAIN_VENDOR="OSELAS.Toolchain-2020.08" +PTXCONF_CROSSCHAIN_CHECK="10.2.1" PTXCONF_LIBC_GLIBC=y # PTXCONF_LIBC_UCLIBC is not set -PTXCONF_GLIBC_VERSION="2.30" +PTXCONF_GLIBC_VERSION="2.32" PTXCONF_GNU_TARGET="aarch64-v8a-linux-gnu" PTXCONF_COMPILER_PREFIX="${PTXCONF_GNU_TARGET}-" PTXCONF_COMPILER_PREFIX_KERNEL="${PTXCONF_COMPILER_PREFIX}" -- 2.28.0 _______________________________________________ DistroKit mailing list DistroKit@pengutronix.de