Feature Request: CFI

[Andarwinux]

Hi,
can you add a kernel build of CFI and CET?
just CFI_CLANG,X86_USER_SHADOW_STACK,X86_KERNEL_IBT.

[Locietta]

The kernel was built with IBT enabled, but one day it caused WSL2 unbootable, so it was disabled at #32. I think I tried CFI and CET before and got similar result.

I just quickly revisit the build with all your 3 configs on, and sadly, WSL2 fails to boot with that kernel build. It's been sad that many kernel hardening feature just cause WSL2 to not boot. I'd like to add these in a clang-built kernel, but it just breaks 😞

[Andarwinux]

I built 6.8.9 kernel locally and IBT does caused wsl2 unbootable, but CFI and CET seem work fine.

[4-FLOSS-Free-Libre-Open-Source-Software]

So we could benefit from those other both features at least ?

[Locietta]

I've opened a PR(#62) to re-enable CFI & CET.