[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20140627220400.GT32514@n2100.arm.linux.org.uk>
Date: Fri, 27 Jun 2014 23:04:00 +0100
From: Russell King - ARM Linux <linux@....linux.org.uk>
To: Rich Felker <dalias@...c.org>
Cc: musl@...ts.openwall.com, Kees Cook <keescook@...omium.org>,
linux-arm-kernel@...ts.infradead.org
Subject: Re: Re: Thread pointer changes
On Fri, Jun 27, 2014 at 05:37:43PM -0400, Rich Felker wrote:
> On Fri, Jun 27, 2014 at 12:27:45PM -0700, Andy Lutomirski wrote:
> > Hi ARM people and Kees-
> >
> > The "vectors" page appears to be an abomination that's a lot like the
> > x86_64 vsyscall page. IMO it should be phased out.
>
> I'm not a fan of this extreme approach, but if it's taken, there needs
> to be some way to continue to make universal binaries which work
> safely on:
>
> - Pre-v6, v6, and v7+ hardware.
And that is to make use of the kuser page.
> - Pre-removal and post-removal kernels.
Please, don't get stuff confused.
The kuser page isn't going anywhere _except_ for one situation: where
the system integrator has determined that they have built their
userspace not to require the kuser helpers, and wish to have greater
security and performance through doing so.
What we *aren't* doing with the kernel is removing the page entirely
for ARMv7+ CPUs. We are merely giving system integrators the option
to increase security /provided/ their userspace is built appropriately.
If the userspace requires the kuser helpers, then the page *must* be
provided by the kernel.
It is a system integrator/distro bug to provide a kernel with the kuser
helpers disabled, but then to provide a libc which requires the page.
The system integrator has a choice to make:
1. Have the kuser helper page, have libc support for it, and have
compatibility for all ARM CPUs - but have the (minor) security
issues raised last year over the page.
or
2. Disable the kuser helper page on later CPUs which provide /all/
the facilities userspace needs in hardware, and build for a
minimum of those CPUs.
--
FTTC broadband for 0.8mile line: now at 9.7Mbps down 460kbps up... slowly
improving, and getting towards what was expected from it.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
