From: Shijie Huang <shijie@amperemail.onmicrosoft.com>
To: Will Deacon <will@kernel.org>,
Huang Shijie <shijie@os.amperecomputing.com>
Cc: catalin.marinas@arm.com, corbet@lwn.net,
patches@amperecomputing.com, cl@linux.com,
yang@os.amperecomputing.com, akpm@linux-foundation.org,
paulmck@kernel.org, rostedt@goodmis.org, Neeraj.Upadhyay@amd.com,
bp@alien8.de, ardb@kernel.org, anshuman.khandual@arm.com,
suzuki.poulose@arm.com, gshan@redhat.com,
linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org,
linux-arm-kernel@lists.infradead.org, rdunlap@infradead.org,
Christoph Lameter <cl@gentwo.org>
Subject: Re: [PATCH V6 1/2] arm64: refactor the rodata=xxx
Date: Tue, 9 Sep 2025 10:52:55 +0800 [thread overview]
Message-ID: <3e71ddb9-f457-461e-a949-13e07a4a8b08@amperemail.onmicrosoft.com> (raw)
In-Reply-To: <aL6_gZWeqAGZjda2@willie-the-truck>
On 08/09/2025 19:35, Will Deacon wrote:
> On Thu, Jul 03, 2025 at 05:42:11PM +0800, Huang Shijie wrote:
>> As per admin guide documentation, "rodata=on" should be the default on
>> platforms. Documentation/admin-guide/kernel-parameters.txt describes
>> these options as
>>
>> rodata= [KNL,EARLY]
>> on Mark read-only kernel memory as read-only (default).
>> off Leave read-only kernel memory writable for debugging.
>> full Mark read-only kernel memory and aliases as read-only
>> [arm64]
>>
>> But on arm64 platform, "rodata=full" is the default instead.
> Please mention RODATA_FULL_DEFAULT_ENABLED here.
okay.
>> This patch implements the following changes.
>>
>> - Make "rodata=on" behaviour same as the original "rodata=full"
> You should mention that this gives us parity with x86.
No problem.
>> - Make "rodata=noalias" (new) behaviour same as the original "rodata=on"
>> - Drop the original "rodata=full"
>> - Add comment for arch_parse_debug_rodata()
>> - Update kernel-parameters.txt as required
> These last two are self-evident from the code and don't need to be listed
> here.
>
>> After this patch, the "rodata=on" will be the default on arm64 platform
>> as well.
>>
>> Reviewed-by: Christoph Lameter (Ampere) <cl@gentwo.org>
>> Signed-off-by: Huang Shijie <shijie@os.amperecomputing.com>
>> ---
>> .../admin-guide/kernel-parameters.txt | 2 +-
>> arch/arm64/include/asm/setup.h | 28 +++++++++++++++++--
>> 2 files changed, 27 insertions(+), 3 deletions(-)
>>
>> diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt
>> index ee0735c6b8e2..3590bdc8d9a5 100644
>> --- a/Documentation/admin-guide/kernel-parameters.txt
>> +++ b/Documentation/admin-guide/kernel-parameters.txt
>> @@ -6354,7 +6354,7 @@
>> rodata= [KNL,EARLY]
>> on Mark read-only kernel memory as read-only (default).
>> off Leave read-only kernel memory writable for debugging.
>> - full Mark read-only kernel memory and aliases as read-only
>> + noalias Use more block mappings, may have better performance.
>> [arm64]
> This isn't particularly helpful documentation and I think we need to mention
> the linear alias rather than talk about the page-table structure.
>
> How about:
>
> noalias Mark read-only kernel memory as read-only but retain
> writable aliases in the direct map for regions outside
> of the kernel image. [arm64]
>
> ?
Okay, thanks.
>> diff --git a/arch/arm64/include/asm/setup.h b/arch/arm64/include/asm/setup.h
>> index ba269a7a3201..6b994d0881d1 100644
>> --- a/arch/arm64/include/asm/setup.h
>> +++ b/arch/arm64/include/asm/setup.h
>> @@ -13,6 +13,30 @@
>> extern phys_addr_t __fdt_pointer __initdata;
>> extern u64 __cacheline_aligned boot_args[4];
>>
>> +/*
>> + * rodata=on (default)
>> + *
>> + * This applies read-only attributes to VM areas and to the linear
>> + * alias of the backing pages as well. This prevents code or read-
>> + * only data from being modified (inadvertently or intentionally),
>> + * via another mapping for the same memory page.
>> + *
>> + * But this might cause linear map region to be mapped down to base
>> + * pages, which may adversely affect performance in some cases.
>> + *
>> + * rodata=off
>> + *
>> + * This provides more block mappings and contiguous hints for linear
>> + * map region which would minimize TLB footprint. This also leaves
>> + * read-only kernel memory writable for debugging.
>> + *
>> + * rodata=noalias
>> + *
>> + * This provides more block mappings and contiguous hints for linear
>> + * map region which would minimize TLB footprint. This leaves the linear
>> + * alias of read-only mappings in the vmalloc space writeable, making
>> + * them susceptible to inadvertent modification by software.
>> + */
> Please remove this comment. If you want to keep it, this information
> belongs either in the commit message (to justify the performance impact)
Okay, I can move it to commit message.
Thanks
Huang Shijie
next prev parent reply other threads:[~2025-09-09 6:56 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-07-03 9:42 [PATCH V6 0/2] arm64: refactor the rodata=xxx Huang Shijie
2025-07-03 9:42 ` [PATCH V6 1/2] " Huang Shijie
2025-09-08 11:35 ` Will Deacon
2025-09-09 2:52 ` Shijie Huang [this message]
2025-07-03 9:42 ` [PATCH V6 2/2] arm64/Kconfig: Remove CONFIG_RODATA_FULL_DEFAULT_ENABLED Huang Shijie
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3e71ddb9-f457-461e-a949-13e07a4a8b08@amperemail.onmicrosoft.com \
--to=shijie@amperemail.onmicrosoft.com \
--cc=Neeraj.Upadhyay@amd.com \
--cc=akpm@linux-foundation.org \
--cc=anshuman.khandual@arm.com \
--cc=ardb@kernel.org \
--cc=bp@alien8.de \
--cc=catalin.marinas@arm.com \
--cc=cl@gentwo.org \
--cc=cl@linux.com \
--cc=corbet@lwn.net \
--cc=gshan@redhat.com \
--cc=linux-arm-kernel@lists.infradead.org \
--cc=linux-doc@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=patches@amperecomputing.com \
--cc=paulmck@kernel.org \
--cc=rdunlap@infradead.org \
--cc=rostedt@goodmis.org \
--cc=shijie@os.amperecomputing.com \
--cc=suzuki.poulose@arm.com \
--cc=will@kernel.org \
--cc=yang@os.amperecomputing.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox