From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id BB251C433EF for ; Thu, 3 Feb 2022 22:24:21 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 3D7976B0074; Thu, 3 Feb 2022 17:24:21 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 386AE6B0075; Thu, 3 Feb 2022 17:24:21 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 276836B0078; Thu, 3 Feb 2022 17:24:21 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0129.hostedemail.com [216.40.44.129]) by kanga.kvack.org (Postfix) with ESMTP id 1A2736B0074 for ; Thu, 3 Feb 2022 17:24:21 -0500 (EST) Received: from smtpin31.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay03.hostedemail.com (Postfix) with ESMTP id CD32E824C429 for ; Thu, 3 Feb 2022 22:24:20 +0000 (UTC) X-FDA: 79102898280.31.AA6F753 Received: from mail-oi1-f173.google.com (mail-oi1-f173.google.com [209.85.167.173]) by imf27.hostedemail.com (Postfix) with ESMTP id 7E1964000A for ; Thu, 3 Feb 2022 22:24:20 +0000 (UTC) Received: by mail-oi1-f173.google.com with SMTP id s185so6361289oie.3 for ; Thu, 03 Feb 2022 14:24:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=PlIDP1o24LdMRWZjnewjhrwwRT0kaZCiZatY+bUHhaE=; b=Pa/zmtlEee6Bkck7BMVEfXmMkzXP7n3Zhw3ZwUFdHgIL06epfTuIRhs4L5f2erOEv6 /CSfNsvyXtX4OQ1s9KNuwxEBa/qJnLh1Ge66zdYYJ721V6+XtZhzbma5yb3YWhAySLpO H0ah0BjAz1rrJGsnye3ObO+TY6qHSGQijiMCZdIt+nZ6qRGbfB5YpP/dzN+hq+YELDyD N50HGOsgS8Wlm8RvKWigiNb0k4VWtS5FF8Ll9SRXU2rPD0AU4sAd63KiX5N4AlqvD5ZX /Ul8gq4dI1BoIhfu6q46m+cmamckrA25fKM3V1Q4jgQq17TVecEoOQT21aGzRqwxevJ2 L7lQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=PlIDP1o24LdMRWZjnewjhrwwRT0kaZCiZatY+bUHhaE=; b=qhAVSjWWF3cncpTZXUQoFSJCQTgh9CivNKQQyD1zcLVvM1UZ1wwK1Gd3gYfJ+E7hyM Jm8iQuRfgse487zMtf+YYeUSY3JH+9BdzvdR7K75ImfddW02n87dETmZeeqIcz8shYiy Xiln1ULLT699tkKxz8tGzgGNSf4eWrV45bdZdFv0gB5YiZrxm1UxJr89SZeLLRs0r8TX TY5Em06H/7bKgnZnrhi8i6YjlEBYFG9VhRAhYTqyrqRZm7cgPkqYMEPOijfH8FtYr3Sr kv1e/X9/Bq3yEmsWQdGEa9nBXq872pDm8I8XvLpGMUiI69rqDFuwze5wfmDeiczmK29n niJQ== X-Gm-Message-State: AOAM533aLgepTdE1G336ICh4W56+qYNh7slwoBA3JoOSIpdCNLEtBVq0 3MrvlHw+dD1HKwpHckBex922VAleA5HrK4hNq8g= X-Google-Smtp-Source: ABdhPJxQMlUvdTyiQLXOpNnctVTARflweiNDaSMIW0AFhqFvwNhPdZo0t9yaOB/Az2gV2bKgrg4Dh4u4r8V8CstSTVQ= X-Received: by 2002:a05:6808:159e:: with SMTP id t30mr27686oiw.132.1643927059755; Thu, 03 Feb 2022 14:24:19 -0800 (PST) MIME-Version: 1.0 References: <20220130211838.8382-1-rick.p.edgecombe@intel.com> <20220130211838.8382-36-rick.p.edgecombe@intel.com> In-Reply-To: From: "H.J. Lu" Date: Thu, 3 Feb 2022 14:23:43 -0800 Message-ID: Subject: Re: [PATCH 35/35] x86/cpufeatures: Limit shadow stack to Intel CPUs To: John Allen Cc: Rick Edgecombe , "the arch/x86 maintainers" , "H . Peter Anvin" , Thomas Gleixner , Ingo Molnar , LKML , "open list:DOCUMENTATION" , Linux-MM , linux-arch , Linux API , Arnd Bergmann , Andy Lutomirski , Balbir Singh , Borislav Petkov , Cyrill Gorcunov , Dave Hansen , Eugene Syromiatnikov , Florian Weimer , Jann Horn , Jonathan Corbet , Kees Cook , Mike Kravetz , Nadav Amit , Oleg Nesterov , Pavel Machek , Peter Zijlstra , Randy Dunlap , "Ravi V . Shankar" , Dave Martin , Weijiang Yang , "Kirill A . Shutemov" , joao.moreira@intel.com, Kostya Serebryany , Stephane Eranian Content-Type: text/plain; charset="UTF-8" X-Rspamd-Server: rspam04 X-Rspamd-Queue-Id: 7E1964000A X-Rspam-User: nil Authentication-Results: imf27.hostedemail.com; dkim=pass header.d=gmail.com header.s=20210112 header.b="Pa/zmtlE"; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (imf27.hostedemail.com: domain of hjl.tools@gmail.com designates 209.85.167.173 as permitted sender) smtp.mailfrom=hjl.tools@gmail.com X-Stat-Signature: mobqxhgxiet8pin7mgk8tnrg7zti5jds X-HE-Tag: 1643927060-688890 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Thu, Feb 3, 2022 at 1:58 PM John Allen wrote: > > On Sun, Jan 30, 2022 at 01:18:38PM -0800, Rick Edgecombe wrote: > > Shadow stack is supported on newer AMD processors, but the kernel > > implementation has not been tested on them. Prevent basic issues from > > showing up for normal users by disabling shadow stack on all CPUs except > > Intel until it has been tested. At which point the limitation should be > > removed. > > Hi Rick, > > I have been testing Yu-Cheng's patchsets on AMD hardware and I am > working on testing this version now. How are you testing this new > series? I can partially test by calling the prctl enable for shadow > stack directly from a program, but I'm not sure how useful that's going > to be without the glibc support. Do you have a public repo with the > necessary glibc changes to enable shadow stack early? > The glibc CET branch is at https://gitlab.com/x86-glibc/glibc/-/commits/users/hjl/cet/master -- H.J.