From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on archive.lwn.net X-Spam-Level: X-Spam-Status: No, score=-5.8 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_HI autolearn=ham autolearn_force=no version=3.4.1 Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by archive.lwn.net (Postfix) with ESMTP id BCC7A7D08C for ; Thu, 7 Jun 2018 15:46:38 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S934490AbeFGOke (ORCPT ); Thu, 7 Jun 2018 10:40:34 -0400 Received: from mga09.intel.com ([134.134.136.24]:36280 "EHLO mga09.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932912AbeFGOkc (ORCPT ); Thu, 7 Jun 2018 10:40:32 -0400 X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga008.jf.intel.com ([10.7.209.65]) by orsmga102.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Jun 2018 07:40:31 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.49,486,1520924400"; d="scan'208";a="47542281" Received: from 2b52.sc.intel.com ([143.183.136.51]) by orsmga008.jf.intel.com with ESMTP; 07 Jun 2018 07:40:31 -0700 From: Yu-cheng Yu To: linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, x86@kernel.org, "H. Peter Anvin" , Thomas Gleixner , Ingo Molnar , "H.J. Lu" , Vedvyas Shanbhogue , "Ravi V. Shankar" , Dave Hansen , Andy Lutomirski , Jonathan Corbet , Oleg Nesterov , Arnd Bergmann , Mike Kravetz Cc: Yu-cheng Yu Subject: [PATCH 0/9] Control Flow Enforcement - Part (2) Date: Thu, 7 Jun 2018 07:36:56 -0700 Message-Id: <20180607143705.3531-1-yu-cheng.yu@intel.com> X-Mailer: git-send-email 2.15.1 Sender: linux-doc-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-doc@vger.kernel.org Summary of changes: Shadow stack kernel config option; Control protection exception; and Shadow stack memory management. The shadow stack PTE needs to be read-only and dirty. Changes are made to: Use the read-only and hardware dirty combination exclusively for shadow stack; Use a PTE spare bit to indicate other PTE dirty conditions; Shadow stack page fault handling. Yu-cheng Yu (9): x86/cet: Control protection exception handler x86/cet: Add Kconfig option for user-mode shadow stack mm: Introduce VM_SHSTK for shadow stack memory x86/mm: Change _PAGE_DIRTY to _PAGE_DIRTY_HW x86/mm: Introduce _PAGE_DIRTY_SW x86/mm: Introduce ptep_set_wrprotect_flush and related functions x86/mm: Shadow stack page fault error checking x86/cet: Handle shadow stack page fault x86/cet: Handle THP/HugeTLB shadow stack page copying arch/x86/Kconfig | 24 ++++++ arch/x86/entry/entry_32.S | 5 ++ arch/x86/entry/entry_64.S | 2 +- arch/x86/include/asm/pgtable.h | 149 ++++++++++++++++++++++++++++++----- arch/x86/include/asm/pgtable_types.h | 31 +++++--- arch/x86/include/asm/traps.h | 5 ++ arch/x86/kernel/idt.c | 1 + arch/x86/kernel/relocate_kernel_64.S | 2 +- arch/x86/kernel/traps.c | 61 ++++++++++++++ arch/x86/kvm/vmx.c | 2 +- arch/x86/mm/fault.c | 11 +++ include/asm-generic/pgtable.h | 38 +++++++++ include/linux/mm.h | 8 ++ mm/huge_memory.c | 10 ++- mm/hugetlb.c | 2 +- mm/internal.h | 8 ++ mm/memory.c | 32 +++++++- 17 files changed, 353 insertions(+), 38 deletions(-) -- 2.15.1 -- To unsubscribe from this list: send the line "unsubscribe linux-doc" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html