From mboxrd@z Thu Jan 1 00:00:00 1970 From: Yu-cheng Yu Subject: [PATCH 0/9] Control Flow Enforcement - Part (2) Date: Thu, 7 Jun 2018 07:36:56 -0700 Message-ID: <20180607143705.3531-1-yu-cheng.yu@intel.com> Return-path: Sender: linux-kernel-owner@vger.kernel.org To: linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, x86@kernel.org, "H. Peter Anvin" , Thomas Gleixner , Ingo Molnar , "H.J. Lu" , Vedvyas Shanbhogue , "Ravi V. Shankar" , Dave Hansen , Andy Lutomirski , Jonathan Corbet , Oleg Nesterov , Arnd Bergmann , Mike Kravetz Cc: Yu-cheng Yu List-Id: linux-arch.vger.kernel.org Summary of changes: Shadow stack kernel config option; Control protection exception; and Shadow stack memory management. The shadow stack PTE needs to be read-only and dirty. Changes are made to: Use the read-only and hardware dirty combination exclusively for shadow stack; Use a PTE spare bit to indicate other PTE dirty conditions; Shadow stack page fault handling. Yu-cheng Yu (9): x86/cet: Control protection exception handler x86/cet: Add Kconfig option for user-mode shadow stack mm: Introduce VM_SHSTK for shadow stack memory x86/mm: Change _PAGE_DIRTY to _PAGE_DIRTY_HW x86/mm: Introduce _PAGE_DIRTY_SW x86/mm: Introduce ptep_set_wrprotect_flush and related functions x86/mm: Shadow stack page fault error checking x86/cet: Handle shadow stack page fault x86/cet: Handle THP/HugeTLB shadow stack page copying arch/x86/Kconfig | 24 ++++++ arch/x86/entry/entry_32.S | 5 ++ arch/x86/entry/entry_64.S | 2 +- arch/x86/include/asm/pgtable.h | 149 ++++++++++++++++++++++++++++++----- arch/x86/include/asm/pgtable_types.h | 31 +++++--- arch/x86/include/asm/traps.h | 5 ++ arch/x86/kernel/idt.c | 1 + arch/x86/kernel/relocate_kernel_64.S | 2 +- arch/x86/kernel/traps.c | 61 ++++++++++++++ arch/x86/kvm/vmx.c | 2 +- arch/x86/mm/fault.c | 11 +++ include/asm-generic/pgtable.h | 38 +++++++++ include/linux/mm.h | 8 ++ mm/huge_memory.c | 10 ++- mm/hugetlb.c | 2 +- mm/internal.h | 8 ++ mm/memory.c | 32 +++++++- 17 files changed, 353 insertions(+), 38 deletions(-) -- 2.15.1 From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga09.intel.com ([134.134.136.24]:36280 "EHLO mga09.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932912AbeFGOkc (ORCPT ); Thu, 7 Jun 2018 10:40:32 -0400 From: Yu-cheng Yu Subject: [PATCH 0/9] Control Flow Enforcement - Part (2) Date: Thu, 7 Jun 2018 07:36:56 -0700 Message-ID: <20180607143705.3531-1-yu-cheng.yu@intel.com> Sender: linux-arch-owner@vger.kernel.org List-ID: To: linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, x86@kernel.org, "H. Peter Anvin" , Thomas Gleixner , Ingo Molnar , "H.J. Lu" , Vedvyas Shanbhogue , "Ravi V. Shankar" , Dave Hansen , Andy Lutomirski , Jonathan Corbet , Oleg Nesterov , Arnd Bergmann , Mike Kravetz Cc: Yu-cheng Yu Message-ID: <20180607143656.1w8VccJSmKtjudWq1ns0cmf3I_Tfj9sh_Wqj42sYV10@z> Summary of changes: Shadow stack kernel config option; Control protection exception; and Shadow stack memory management. The shadow stack PTE needs to be read-only and dirty. Changes are made to: Use the read-only and hardware dirty combination exclusively for shadow stack; Use a PTE spare bit to indicate other PTE dirty conditions; Shadow stack page fault handling. Yu-cheng Yu (9): x86/cet: Control protection exception handler x86/cet: Add Kconfig option for user-mode shadow stack mm: Introduce VM_SHSTK for shadow stack memory x86/mm: Change _PAGE_DIRTY to _PAGE_DIRTY_HW x86/mm: Introduce _PAGE_DIRTY_SW x86/mm: Introduce ptep_set_wrprotect_flush and related functions x86/mm: Shadow stack page fault error checking x86/cet: Handle shadow stack page fault x86/cet: Handle THP/HugeTLB shadow stack page copying arch/x86/Kconfig | 24 ++++++ arch/x86/entry/entry_32.S | 5 ++ arch/x86/entry/entry_64.S | 2 +- arch/x86/include/asm/pgtable.h | 149 ++++++++++++++++++++++++++++++----- arch/x86/include/asm/pgtable_types.h | 31 +++++--- arch/x86/include/asm/traps.h | 5 ++ arch/x86/kernel/idt.c | 1 + arch/x86/kernel/relocate_kernel_64.S | 2 +- arch/x86/kernel/traps.c | 61 ++++++++++++++ arch/x86/kvm/vmx.c | 2 +- arch/x86/mm/fault.c | 11 +++ include/asm-generic/pgtable.h | 38 +++++++++ include/linux/mm.h | 8 ++ mm/huge_memory.c | 10 ++- mm/hugetlb.c | 2 +- mm/internal.h | 8 ++ mm/memory.c | 32 +++++++- 17 files changed, 353 insertions(+), 38 deletions(-) -- 2.15.1