x86/cfi: Add "debug" option to "cfi=" bootparam

Add "debug" option for "cfi=" bootparam to get details on early CFI
initialization steps so future Kees can find breakage easier.

Signed-off-by: Kees Cook <kees@kernel.org>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Link: https://lore.kernel.org/r/20250904034656.3670313-5-kees@kernel.org
This commit is contained in:
Kees Cook
2025-09-03 20:46:44 -07:00
committed by Peter Zijlstra
parent 9f303a35d1
commit 026211c40b
2 changed files with 17 additions and 0 deletions

View File

@@ -624,6 +624,7 @@
bhi: Enable register poisoning to stop speculation
across FineIBT. (Disabled by default.)
warn: Do not enforce CFI checking: warn only.
debug: Report CFI initialization details.
cgroup_disable= [KNL] Disable a particular controller or optional feature
Format: {name of the controller(s) or feature(s) to disable}