On Mon, Aug 25, 2025 at 5:35 PM Kees Cook <kees@xxxxxxxxxx> wrote: > > Yeah, that's a good idea. What the right way to do that? > > config CFI_CLANG > bool "Use Clang's Control Flow Integrity (CFI)" > depends on ARCH_SUPPORTS_CFI > select CFI > > ? I don't recall what is the idiomatic solution for renames, but I remember Linus talking about this topic and about avoiding losing old values if possible (perhaps getting a new question in `oldconfig` is OK as long as the `olddefconfig` respects the old value). I think your suggestion above will still make it appear twice in `menuconfig` -- there may be a way to play with visibility to make it better. A simple possibility I can think of (assuming it works) is having the CFI symbol for the time being introduced just as a `def_bool CFI_CLANG` for a few releases so that people get the new one in their configs. Cheers, Miguel
