On August 25, 2025 1:00:22 PM EDT, Miguel Ojeda <miguel.ojeda.sandonis@xxxxxxxxx> wrote:
>On Mon, Aug 25, 2025 at 5:35 PM Kees Cook <kees@xxxxxxxxxx> wrote:
>>
>> Yeah, that's a good idea. What the right way to do that?
>>
>> config CFI_CLANG
>> bool "Use Clang's Control Flow Integrity (CFI)"
>> depends on ARCH_SUPPORTS_CFI
>> select CFI
>>
>> ?
>
>I don't recall what is the idiomatic solution for renames, but I
>remember Linus talking about this topic and about avoiding losing old
>values if possible (perhaps getting a new question in `oldconfig` is
>OK as long as the `olddefconfig` respects the old value).
>
>I think your suggestion above will still make it appear twice in
>`menuconfig` -- there may be a way to play with visibility to make it
>better.
>
>A simple possibility I can think of (assuming it works) is having the
>CFI symbol for the time being introduced just as a `def_bool
>CFI_CLANG` for a few releases so that people get the new one in their
>configs.
Ah, I think this works:
config CFI_CLANG
bool
config CFI
bool "...."
default CFI_CLANG
I will add that for v2.
-Kees
--
Kees Cook
