Navigation: Linux Kernel Driver DataBase - web LKDDB: Main index - X index


General informations

The Linux kernel configuration item CONFIG_X86_KERNEL_IBT:

Help text

Build the kernel with support for Indirect Branch Tracking, a hardware support course-grain forward-edge Control Flow Integrity protection. It enforces that all indirect calls must land on an ENDBR instruction, as such, the compiler will instrument the code with them to make this happen.

In addition to building the kernel with IBT, seal all functions that are not indirect call targets, avoiding them ever becoming one.

This requires LTO like objtool runs and will slow down the build. It does significantly reduce the number of ENDBR instructions in the kernel image.



Raw data from LKDDb:


This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

Automatic links from Google (and ads)

Custom Search

Popular queries:

Navigation: Linux Kernel Driver DataBase - web LKDDB: main index - X index

Automatically generated (in year 2024). See also LKDDb sources on GitLab