summaryrefslogtreecommitdiff
path: root/INSTALL
diff options
context:
space:
mode:
authorH.J. Lu <hjl.tools@gmail.com>2018-07-18 09:52:40 -0700
committerH.J. Lu <hjl.tools@gmail.com>2018-07-18 09:52:53 -0700
commite6c695099b7894bce72de04009c889c8f6e674ae (patch)
tree13f0ff6ccee563fc3dba6e37581241c9cede0894 /INSTALL
parente2d40a8822be27ddbd512599ea1955e52f90bf87 (diff)
downloadglibc-e6c695099b7894bce72de04009c889c8f6e674ae.tar.gz
Intel CET: Document --enable-cet
* NEWS: Mention --enable-cet. * manual/install.texi: Document --enable-cet. * INSTALL: Regenerated.
Diffstat (limited to 'INSTALL')
-rw-r--r--INSTALL11
1 files changed, 11 insertions, 0 deletions
diff --git a/INSTALL b/INSTALL
index 3c656fb7a6..844aa0f34c 100644
--- a/INSTALL
+++ b/INSTALL
@@ -106,6 +106,17 @@ if 'CFLAGS' is specified it must enable optimization. For example:
programs and tests are created as dynamic position independent
executables (PIE) by default.
+'--enable-cet'
+ Enable Intel Control-flow Enforcement Technology (CET) support.
+ When the GNU C Library is built with '--enable-cet', the resulting
+ library is protected with indirect branch tracking (IBT) and shadow
+ stack (SHSTK). When CET is enabled, the GNU C Library is
+ compatible with all existing executables and shared libraries.
+ This feature is currently supported on i386, x86_64 and x32 with
+ GCC 8 and binutils 2.29 or later. Note that when CET is enabled,
+ the GNU C Library requires CPUs capable of multi-byte NOPs, like
+ x86-64 processors as well as Intel Pentium Pro or newer.
+
'--disable-profile'
Don't build libraries with profiling information. You may want to
use this option if you don't plan to do profiling.