[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1534806880.10027.29.camel@infradead.org>
Date: Tue, 21 Aug 2018 00:14:40 +0100
From: David Woodhouse <dwmw2@...radead.org>
To: Dave Hansen <dave.hansen@...el.com>, Tycho Andersen <tycho@...ho.ws>,
Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Konrad Rzeszutek Wilk <konrad.wilk@...cle.com>,
juerg.haefliger@....com, deepa.srinivasan@...cle.com, Jim Mattson
<jmattson@...gle.com>, Andrew Cooper <andrew.cooper3@...rix.com>, Linux
Kernel Mailing List <linux-kernel@...r.kernel.org>, Boris Ostrovsky
<boris.ostrovsky@...cle.com>, linux-mm <linux-mm@...ck.org>, Thomas
Gleixner <tglx@...utronix.de>, joao.m.martins@...cle.com,
pradeep.vincent@...cle.com, Andi Kleen <ak@...ux.intel.com>, Khalid Aziz
<khalid.aziz@...cle.com>, kanth.ghatraju@...cle.com, Liran Alon
<liran.alon@...cle.com>, Kees Cook <keescook@...gle.com>,
jsteckli@...inf.tu-dresden.de, Kernel Hardening
<kernel-hardening@...ts.openwall.com>, chris.hyser@...cle.com, Tyler Hicks
<tyhicks@...onical.com>, John Haxby <john.haxby@...cle.com>, Jon Masters
<jcm@...hat.com>
Subject: Re: Redoing eXclusive Page Frame Ownership (XPFO) with isolated
CPUs in mind (for KVM to isolate its guests per CPU)
On Mon, 2018-08-20 at 15:59 -0700, Dave Hansen wrote:
> On 08/20/2018 03:35 PM, Tycho Andersen wrote:
> > Since meltdown hit, I haven't worked seriously on understand and
> > implementing his suggestions, in part because it wasn't clear to me
> > what pieces of the infrastructure we might be able to re-use. Someone
> > who knows more about mm/ might be able to suggest an approach, though
>
> Unfortunately, I'm not sure there's much of KPTI we can reuse. KPTI
> still has a very static kernel map (well, two static kernel maps) and
> XPFO really needs a much more dynamic map.
>
> We do have a bit of infrastructure now to do TLB flushes near the kernel
> exit point, but it's entirely for the user address space, which isn't
> affected by XPFO.
One option is to have separate kernel address spaces, both with and
without the full physmap.
If you need the physmap, then rather than manually mapping with 4KiB
pages, you just switch. Having first ensured that no malicious guest or
userspace is running on a sibling, of course.
I'm not sure it's a win, but it might be worth looking at.
Download attachment "smime.p7s" of type "application/x-pkcs7-signature" (5213 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
