From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christoffer Dall Subject: Re: [PATCH 0/5] arm/arm64: KVM: Tighten memory protection flags Date: Wed, 29 Jun 2016 14:21:18 +0200 Message-ID: <20160629122118.GU26498@cbox> References: <1465826449-14349-1-git-send-email-marc.zyngier@arm.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from localhost (localhost [127.0.0.1]) by mm01.cs.columbia.edu (Postfix) with ESMTP id 72B6A49B1A for ; Wed, 29 Jun 2016 08:15:18 -0400 (EDT) Received: from mm01.cs.columbia.edu ([127.0.0.1]) by localhost (mm01.cs.columbia.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9lkzIRBY2MqO for ; Wed, 29 Jun 2016 08:15:17 -0400 (EDT) Received: from mail-wm0-f44.google.com (mail-wm0-f44.google.com [74.125.82.44]) by mm01.cs.columbia.edu (Postfix) with ESMTPS id 1F72C49AF5 for ; Wed, 29 Jun 2016 08:15:16 -0400 (EDT) Received: by mail-wm0-f44.google.com with SMTP id a66so70989250wme.0 for ; Wed, 29 Jun 2016 05:20:29 -0700 (PDT) Content-Disposition: inline In-Reply-To: <1465826449-14349-1-git-send-email-marc.zyngier@arm.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kvmarm-bounces@lists.cs.columbia.edu Sender: kvmarm-bounces@lists.cs.columbia.edu To: Marc Zyngier Cc: kvm@vger.kernel.org, Catalin Marinas , Will Deacon , Russell King , kvmarm@lists.cs.columbia.edu, linux-arm-kernel@lists.infradead.org List-Id: kvmarm@lists.cs.columbia.edu Hi Marc, On Mon, Jun 13, 2016 at 03:00:44PM +0100, Marc Zyngier wrote: > So far, the HYP mappings have been fairly relaxed: everything is > RWX. Oddly enough, not everybody is fond of this kind of permissions > at the highest exception level. > > This small series tightens it a bit by making: > - the text mapping read-only > - the rodata mapping read-only + no-exec > - everything else read-write + no-exec > > Of course, that's only valid when VHE is not in action. Tested on > Seattle and Cubietruck, based on 4.7-rc2. > I have applied this to queue with a RB on all the patches. It seems like this series applies on top of the merged page tables stuff, but since I think you're going to repost that, I have just applied this and fixed up the conflicts. Could you have a look at kvmarm/queue and let me know if you think it looks good? (and possibly rebase the merge page tables stuff on top of there when you rework that series?) Thanks! -Christoffer From mboxrd@z Thu Jan 1 00:00:00 1970 From: christoffer.dall@linaro.org (Christoffer Dall) Date: Wed, 29 Jun 2016 14:21:18 +0200 Subject: [PATCH 0/5] arm/arm64: KVM: Tighten memory protection flags In-Reply-To: <1465826449-14349-1-git-send-email-marc.zyngier@arm.com> References: <1465826449-14349-1-git-send-email-marc.zyngier@arm.com> Message-ID: <20160629122118.GU26498@cbox> To: linux-arm-kernel@lists.infradead.org List-Id: linux-arm-kernel.lists.infradead.org Hi Marc, On Mon, Jun 13, 2016 at 03:00:44PM +0100, Marc Zyngier wrote: > So far, the HYP mappings have been fairly relaxed: everything is > RWX. Oddly enough, not everybody is fond of this kind of permissions > at the highest exception level. > > This small series tightens it a bit by making: > - the text mapping read-only > - the rodata mapping read-only + no-exec > - everything else read-write + no-exec > > Of course, that's only valid when VHE is not in action. Tested on > Seattle and Cubietruck, based on 4.7-rc2. > I have applied this to queue with a RB on all the patches. It seems like this series applies on top of the merged page tables stuff, but since I think you're going to repost that, I have just applied this and fixed up the conflicts. Could you have a look at kvmarm/queue and let me know if you think it looks good? (and possibly rebase the merge page tables stuff on top of there when you rework that series?) Thanks! -Christoffer