• Marco Elver's avatar
    kasan: add support for kasan.fault=panic_on_write · 452c03fd
    Marco Elver authored
    KASAN's boot time kernel parameter 'kasan.fault=' currently supports
    'report' and 'panic', which results in either only reporting bugs or also
    panicking on reports.
    
    However, some users may wish to have more control over when KASAN reports
    result in a kernel panic: in particular, KASAN reported invalid _writes_
    are of special interest, because they have greater potential to corrupt
    random kernel memory or be more easily exploited.
    
    To panic on invalid writes only, introduce 'kasan.fault=panic_on_write',
    which allows users to choose to continue running on invalid reads, but
    panic only on invalid writes.
    
    Link: https://lkml.kernel.org/r/20230614095158.1133673-1-elver@google.comSigned-off-by: default avatarMarco Elver <elver@google.com>
    Reviewed-by: default avatarAlexander Potapenko <glider@google.com>
    Cc: Aleksandr Nogikh <nogikh@google.com>
    Cc: Andrey Konovalov <andreyknvl@gmail.com>
    Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com>
    Cc: Dmitry Vyukov <dvyukov@google.com>
    Cc: Jonathan Corbet <corbet@lwn.net>
    Cc: Taras Madan <tarasmadan@google.com>
    Cc: Vincenzo Frascino <vincenzo.frascino@arm.com>
    Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
    452c03fd
report.c 17.4 KB