All of lore.kernel.org
 help / color / mirror / Atom feed
From: Mark Rutland <mark.rutland@arm.com>
To: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: linux-arm-kernel@lists.infradead.org, keescook@chromium.org,
	labbott@fedoraproject.org, kernel-hardening@lists.openwall.com,
	will.deacon@arm.com, catalin.marinas@arm.com,
	kvmarm@lists.cs.columbia.edu, marc.zyngier@arm.com
Subject: [kernel-hardening] Re: [PATCH v5 09/10] arm64/mmu: replace 'page_mappings_only' parameter with flags argument
Date: Thu, 9 Mar 2017 18:19:53 +0000	[thread overview]
Message-ID: <20170309181953.GF11966@leverpostej> (raw)
In-Reply-To: <1489047912-642-10-git-send-email-ard.biesheuvel@linaro.org>

On Thu, Mar 09, 2017 at 09:25:11AM +0100, Ard Biesheuvel wrote:
> In preparation of extending the policy for manipulating kernel mappings
> with whether or not contiguous hints may be used in the page tables,
> replace the bool 'page_mappings_only' with a flags field and a flag
> NO_BLOCK_MAPPINGS.
> 
> Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>

Thanks for attacking this.

I was going to comment on the name change, but I see that the next patch
introduces and uses NO_CONT_MAPPINGS, so that's fine by me.

>  void __init create_pgd_mapping(struct mm_struct *mm, phys_addr_t phys,
>  			       unsigned long virt, phys_addr_t size,
>  			       pgprot_t prot, bool page_mappings_only)
>  {
> +	int flags;
> +
>  	BUG_ON(mm == &init_mm);
>  
> +	if (page_mappings_only)
> +		flags = NO_BLOCK_MAPPINGS;

> +
>  	__create_pgd_mapping(mm->pgd, phys, virt, size, prot,
> -			     pgd_pgtable_alloc, page_mappings_only);
> +			     pgd_pgtable_alloc, flags);
>  }

Given we can't pass the flags in to create_pgd_mapping() without
exposing those more generally, this also looks fine.

FWIW:

Reviewed-by: Mark Rutland <mark.rutland@arm.com>

Mark.

WARNING: multiple messages have this Message-ID (diff)
From: Mark Rutland <mark.rutland@arm.com>
To: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: keescook@chromium.org, kernel-hardening@lists.openwall.com,
	marc.zyngier@arm.com, catalin.marinas@arm.com,
	will.deacon@arm.com, kvmarm@lists.cs.columbia.edu,
	linux-arm-kernel@lists.infradead.org, labbott@fedoraproject.org
Subject: Re: [PATCH v5 09/10] arm64/mmu: replace 'page_mappings_only' parameter with flags argument
Date: Thu, 9 Mar 2017 18:19:53 +0000	[thread overview]
Message-ID: <20170309181953.GF11966@leverpostej> (raw)
In-Reply-To: <1489047912-642-10-git-send-email-ard.biesheuvel@linaro.org>

On Thu, Mar 09, 2017 at 09:25:11AM +0100, Ard Biesheuvel wrote:
> In preparation of extending the policy for manipulating kernel mappings
> with whether or not contiguous hints may be used in the page tables,
> replace the bool 'page_mappings_only' with a flags field and a flag
> NO_BLOCK_MAPPINGS.
> 
> Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>

Thanks for attacking this.

I was going to comment on the name change, but I see that the next patch
introduces and uses NO_CONT_MAPPINGS, so that's fine by me.

>  void __init create_pgd_mapping(struct mm_struct *mm, phys_addr_t phys,
>  			       unsigned long virt, phys_addr_t size,
>  			       pgprot_t prot, bool page_mappings_only)
>  {
> +	int flags;
> +
>  	BUG_ON(mm == &init_mm);
>  
> +	if (page_mappings_only)
> +		flags = NO_BLOCK_MAPPINGS;

> +
>  	__create_pgd_mapping(mm->pgd, phys, virt, size, prot,
> -			     pgd_pgtable_alloc, page_mappings_only);
> +			     pgd_pgtable_alloc, flags);
>  }

Given we can't pass the flags in to create_pgd_mapping() without
exposing those more generally, this also looks fine.

FWIW:

Reviewed-by: Mark Rutland <mark.rutland@arm.com>

Mark.

WARNING: multiple messages have this Message-ID (diff)
From: mark.rutland@arm.com (Mark Rutland)
To: linux-arm-kernel@lists.infradead.org
Subject: [PATCH v5 09/10] arm64/mmu: replace 'page_mappings_only' parameter with flags argument
Date: Thu, 9 Mar 2017 18:19:53 +0000	[thread overview]
Message-ID: <20170309181953.GF11966@leverpostej> (raw)
In-Reply-To: <1489047912-642-10-git-send-email-ard.biesheuvel@linaro.org>

On Thu, Mar 09, 2017 at 09:25:11AM +0100, Ard Biesheuvel wrote:
> In preparation of extending the policy for manipulating kernel mappings
> with whether or not contiguous hints may be used in the page tables,
> replace the bool 'page_mappings_only' with a flags field and a flag
> NO_BLOCK_MAPPINGS.
> 
> Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>

Thanks for attacking this.

I was going to comment on the name change, but I see that the next patch
introduces and uses NO_CONT_MAPPINGS, so that's fine by me.

>  void __init create_pgd_mapping(struct mm_struct *mm, phys_addr_t phys,
>  			       unsigned long virt, phys_addr_t size,
>  			       pgprot_t prot, bool page_mappings_only)
>  {
> +	int flags;
> +
>  	BUG_ON(mm == &init_mm);
>  
> +	if (page_mappings_only)
> +		flags = NO_BLOCK_MAPPINGS;

> +
>  	__create_pgd_mapping(mm->pgd, phys, virt, size, prot,
> -			     pgd_pgtable_alloc, page_mappings_only);
> +			     pgd_pgtable_alloc, flags);
>  }

Given we can't pass the flags in to create_pgd_mapping() without
exposing those more generally, this also looks fine.

FWIW:

Reviewed-by: Mark Rutland <mark.rutland@arm.com>

Mark.

  reply	other threads:[~2017-03-09 18:19 UTC|newest]

Thread overview: 51+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-03-09  8:25 [kernel-hardening] [PATCH v5 00/10] arm64: mmu: avoid W+X mappings and re-enable PTE_CONT for kernel Ard Biesheuvel
2017-03-09  8:25 ` Ard Biesheuvel
2017-03-09  8:25 ` Ard Biesheuvel
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 01/10] arm: kvm: move kvm_vgic_global_state out of .text section Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 02/10] arm64: mmu: move TLB maintenance from callers to create_mapping_late() Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 03/10] arm64: alternatives: apply boot time fixups via the linear mapping Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 04/10] arm64: mmu: map .text as read-only from the outset Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 05/10] arm64: mmu: apply strict permissions to .init.text and .init.data Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 06/10] arm64/mmu: align alloc_init_pte prototype with pmd/pud versions Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09 15:53   ` [kernel-hardening] " Mark Rutland
2017-03-09 15:53     ` Mark Rutland
2017-03-09 15:53     ` Mark Rutland
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 07/10] arm64/mmu: ignore debug_pagealloc for kernel segments Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09 17:51   ` [kernel-hardening] " Mark Rutland
2017-03-09 17:51     ` Mark Rutland
2017-03-09 17:51     ` Mark Rutland
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 08/10] arm64/mmu: add contiguous bit to sanity bug check Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09 18:04   ` [kernel-hardening] " Mark Rutland
2017-03-09 18:04     ` Mark Rutland
2017-03-09 18:04     ` Mark Rutland
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 09/10] arm64/mmu: replace 'page_mappings_only' parameter with flags argument Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09 18:19   ` Mark Rutland [this message]
2017-03-09 18:19     ` Mark Rutland
2017-03-09 18:19     ` Mark Rutland
2017-03-09  8:25 ` [kernel-hardening] [PATCH v5 10/10] arm64: mm: set the contiguous bit for kernel mappings where appropriate Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09  8:25   ` Ard Biesheuvel
2017-03-09 19:33   ` [kernel-hardening] " Mark Rutland
2017-03-09 19:33     ` Mark Rutland
2017-03-09 19:33     ` Mark Rutland
2017-03-09 19:40     ` [kernel-hardening] " Ard Biesheuvel
2017-03-09 19:40       ` Ard Biesheuvel
2017-03-09 19:40       ` Ard Biesheuvel

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20170309181953.GF11966@leverpostej \
    --to=mark.rutland@arm.com \
    --cc=ard.biesheuvel@linaro.org \
    --cc=catalin.marinas@arm.com \
    --cc=keescook@chromium.org \
    --cc=kernel-hardening@lists.openwall.com \
    --cc=kvmarm@lists.cs.columbia.edu \
    --cc=labbott@fedoraproject.org \
    --cc=linux-arm-kernel@lists.infradead.org \
    --cc=marc.zyngier@arm.com \
    --cc=will.deacon@arm.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.