On Mon, Aug 25, 2025 at 05:01:13PM +0200, Miguel Ojeda wrote: > On Mon, Aug 25, 2025 at 4:28 PM Kees Cook <kees@xxxxxxxxxx> wrote: > > > > -config CFI_CLANG > > - bool "Use Clang's Control Flow Integrity (CFI)" > > - depends on ARCH_SUPPORTS_CFI_CLANG > > +config CFI > > + bool "Use Kernel Control Flow Integrity (kCFI)" > > + depends on ARCH_SUPPORTS_CFI > > depends on $(cc-option,-fsanitize=kcfi) > > help > > Do we need to do something to make the transition smoother, i.e. > keeping the old one for a while to avoid a new question etc.? Yeah, that's a good idea. What the right way to do that? config CFI_CLANG bool "Use Clang's Control Flow Integrity (CFI)" depends on ARCH_SUPPORTS_CFI select CFI ? -- Kees Cook
