From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marc Zyngier Subject: Re: [PATCH 0/2] KVM: arm/arm64: Add VCPU workarounds firmware register Date: Tue, 22 Jan 2019 11:11:09 +0000 Message-ID: <86a7jt9cc2.wl-marc.zyngier@arm.com> References: <20190107120537.184252-1-andre.przywara@arm.com> <20190122101657.GE3578@e103592.cambridge.arm.com> Mime-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from localhost (localhost [127.0.0.1]) by mm01.cs.columbia.edu (Postfix) with ESMTP id 129CE4A38A for ; Tue, 22 Jan 2019 06:11:25 -0500 (EST) Received: from mm01.cs.columbia.edu ([127.0.0.1]) by localhost (mm01.cs.columbia.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cqFcetOUA5J0 for ; Tue, 22 Jan 2019 06:11:22 -0500 (EST) Received: from foss.arm.com (foss.arm.com [217.140.101.70]) by mm01.cs.columbia.edu (Postfix) with ESMTP id D011C4A376 for ; Tue, 22 Jan 2019 06:11:22 -0500 (EST) In-Reply-To: <20190122101657.GE3578@e103592.cambridge.arm.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kvmarm-bounces@lists.cs.columbia.edu Sender: kvmarm-bounces@lists.cs.columbia.edu To: Dave Martin Cc: Andre Przywara , kvm@vger.kernel.org, linux-arm-kernel@lists.infradead.org, kvmarm@lists.cs.columbia.edu List-Id: kvmarm@lists.cs.columbia.edu On Tue, 22 Jan 2019 10:17:00 +0000, Dave Martin wrote: > > On Mon, Jan 07, 2019 at 12:05:35PM +0000, Andre Przywara wrote: > > Workarounds for Spectre variant 2 or 4 vulnerabilities require some help > > from the firmware, so KVM implements an interface to provide that for > > guests. When such a guest is migrated, we want to make sure we don't > > loose the protection the guest relies on. > > > > This introduces two new firmware registers in KVM's GET/SET_ONE_REG > > interface, so userland can save the level of protection implemented by > > the hypervisor and used by the guest. Upon restoring these registers, > > we make sure we don't downgrade and reject any values that would mean > > weaker protection. > > Just trolling here, but could we treat these as immutable, like the ID > registers? > > We don't support migration between nodes that are "too different" in any > case, so I wonder if adding complex logic to compare vulnerabilities and > workarounds is liable to create more problems than it solves... And that's exactly the case we're trying to avoid. Two instances of the same HW. One with firmware mitigations, one without. Migrating in one direction is perfectly safe, migrating in the other isn't. It is not about migrating to different HW at all. M. -- Jazz is not dead, it just smell funny.