* Sandra Loosemore: > I have a general documentation issue with all the new command-line > options and attributes added by this patch set: the documentation is > very implementor-speaky and doesn't explain what user-level problem > they're trying to solve.
Agreed. Ideally, the documentation would also list the CPU models/model groups where it is known to have the desired effect, and if firmware updates are needed. For some users, it may be useful to be able to advertise that they have built their binaries with hardening, but another group of users is interested in hardening which actually works to stop all potential exploits.