From: Ard Biesheuvel <ardb@kernel.org>
To: linux-efi@vger.kernel.org
Cc: linux-arm-kernel@lists.infradead.org,
Ard Biesheuvel <ardb@kernel.org>,
Catalin Marinas <catalin.marinas@arm.com>,
Will Deacon <will@kernel.org>, Kees Cook <keescook@chromium.org>,
Mark Rutland <mark.rutland@arm.com>,
Peter Zijlstra <peterz@infradead.org>,
Thomas Gleixner <tglx@linutronix.de>,
Ingo Molnar <mingo@redhat.com>, Borislav Petkov <bp@alien8.de>,
Dave Hansen <dave.hansen@linux.intel.com>
Subject: [PATCH v2 0/3] efi: Enable BTI for EFI runtimes services
Date: Mon, 6 Feb 2023 13:49:35 +0100 [thread overview]
Message-ID: <20230206124938.272988-1-ardb@kernel.org> (raw)
The EFI spec v2.10 introduces a global flag in the memory attributes
table that indicates whether the EFI runtime code regions were emitted
with BTI landing pads, and can therefore tolerate being mapped with BTI
enforcement enabled.
Add the generic plumbing for this, and wire it up for arm64.
Changes since v1:
- enable BTI in UEFI code regions even if CONFIG_ARM64_BIT_KERNEL=n
- deal with BTI exceptions occuring in EFI code gracefully
- add equivalent handling to x86
- add Kees's R-b
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: Will Deacon <will@kernel.org>
Cc: Kees Cook <keescook@chromium.org>
Cc: Mark Rutland <mark.rutland@arm.com>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Ingo Molnar <mingo@redhat.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Dave Hansen <dave.hansen@linux.intel.com>
Ard Biesheuvel (3):
efi: Discover BTI support in runtime services regions
efi: arm64: Wire up BTI annotation in memory attributes table
efi: x86: Wire up IBT annotation in memory attributes table
arch/arm/include/asm/efi.h | 2 +-
arch/arm/kernel/efi.c | 5 +++--
arch/arm64/include/asm/efi.h | 3 ++-
arch/arm64/kernel/efi.c | 17 ++++++++++++++---
arch/arm64/kernel/traps.c | 6 ++++++
arch/riscv/include/asm/efi.h | 2 +-
arch/riscv/kernel/efi.c | 3 ++-
arch/x86/include/asm/efi.h | 4 +++-
arch/x86/include/asm/ibt.h | 4 ++--
arch/x86/kernel/apm_32.c | 4 ++--
arch/x86/kernel/cpu/common.c | 5 +++--
arch/x86/platform/efi/efi_64.c | 8 +++++++-
drivers/firmware/efi/memattr.c | 7 ++++++-
include/linux/efi.h | 8 ++++++--
14 files changed, 58 insertions(+), 20 deletions(-)
--
2.39.1
_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel
next reply other threads:[~2023-02-06 12:50 UTC|newest]
Thread overview: 22+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-02-06 12:49 Ard Biesheuvel [this message]
2023-02-06 12:49 ` [PATCH v2 1/3] efi: Discover BTI support in runtime services regions Ard Biesheuvel
2023-02-06 12:49 ` [PATCH v2 2/3] efi: arm64: Wire up BTI annotation in memory attributes table Ard Biesheuvel
2023-02-08 13:00 ` Will Deacon
2023-02-08 13:03 ` Ard Biesheuvel
2023-02-08 14:25 ` Mark Rutland
2023-02-08 14:36 ` Ard Biesheuvel
2023-02-09 14:21 ` Ard Biesheuvel
2023-02-09 15:13 ` Mark Rutland
2023-02-09 15:48 ` Will Deacon
2023-02-20 15:53 ` Mark Brown
2023-02-20 16:46 ` Ard Biesheuvel
2023-02-06 12:49 ` [PATCH v2 3/3] efi: x86: Wire up IBT " Ard Biesheuvel
2023-02-08 15:17 ` Dave Hansen
2023-02-08 20:14 ` Peter Zijlstra
2023-02-08 20:55 ` Mark Rutland
2023-02-09 16:13 ` Kees Cook
2023-02-09 16:23 ` Ard Biesheuvel
2023-02-09 16:27 ` Dave Hansen
2023-02-09 16:37 ` Kees Cook
2023-02-08 17:30 ` Peter Zijlstra
2023-02-08 12:35 ` [PATCH v2 0/3] efi: Enable BTI for EFI runtimes services Ard Biesheuvel
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20230206124938.272988-1-ardb@kernel.org \
--to=ardb@kernel.org \
--cc=bp@alien8.de \
--cc=catalin.marinas@arm.com \
--cc=dave.hansen@linux.intel.com \
--cc=keescook@chromium.org \
--cc=linux-arm-kernel@lists.infradead.org \
--cc=linux-efi@vger.kernel.org \
--cc=mark.rutland@arm.com \
--cc=mingo@redhat.com \
--cc=peterz@infradead.org \
--cc=tglx@linutronix.de \
--cc=will@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).