From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751599AbdITJPq (ORCPT ); Wed, 20 Sep 2017 05:15:46 -0400 Received: from foss.arm.com ([217.140.101.70]:59138 "EHLO foss.arm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751378AbdITJPo (ORCPT ); Wed, 20 Sep 2017 05:15:44 -0400 Date: Wed, 20 Sep 2017 10:15:56 +0100 From: Will Deacon To: Kees Cook Cc: Mark Salyzyn , Catalin Marinas , LKML , kevin.brodsky@arm.com, Ingo Molnar , Christian Borntraeger , James Morse , Peter Zijlstra , Dave Martin , credmonster@gmail.com, zijun_hu , Mark Rutland , Jisheng Zhang , Laura Abbott , John Stultz , "linux-arm-kernel@lists.infradead.org" , AKASHI Takahiro , Michal Marek , Ard Biesheuvel Subject: Re: [PATCH v3 0/3] arm64: Add CONFIG_KUSER_HELPERS Message-ID: <20170920091555.GA3782@arm.com> References: <20170911152635.95367-1-salyzyn@android.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Sep 19, 2017 at 03:02:22PM -0700, Kees Cook wrote: > On Mon, Sep 11, 2017 at 8:26 AM, Mark Salyzyn wrote: > > Make it possible to disable the kuser helpers by adding a KUSER_HELPERS > > config option (enabled by default). When disabled, all kuser > > helpers-related code is removed from the kernel and no mapping is done > > at the fixed high address (0xffff0000); any attempt to use a kuser > > helper from a 32-bit process will result in a segfault. > > > > Signed-off-by: Mark Salyzyn > > > > v2: > > - vectors_page and compat_vdso_spec as array of 2 > > - free sigpage if vectors allocation failed > > - adjust makefile so one line for each of the assembler source modules > > - split off assembler changes to a new previous patch in series to reduce churn > > - modify slightly the feature documentation to reduce its reach > > - modify slightly the feature documentation to rationalize the yes default. > > - There are more ifdefs as a result of the rebase. > > > > v3: > > - rebase (minor conflicts) > > This looks great to me. I'd love to see kuser helpers gone. :) > > Catalin, Will, does this need anything else? I haven't had chance to look at the patches yet (buried in other stuff), but I aim to get to it in the next couple of weeks. Will