Andrew Kaster f08e91f67e Kernel: Don't check pledges or veil against code coverage data files ...

Coverage tools like LLVM's source-based coverage or GNU's --coverage
need to be able to write out coverage files from any binary, regardless
of its security posture. Not ignoring these pledges and veils means we
can't get our coverage data out without playing some serious tricks.

However this is pretty terrible for normal exeuction, so only skip these
checks when we explicitly configured userspace for coverage.

2022-05-02 01:46:18 +02:00

34 KiB

Raw Blame History

View Raw