linux-kernel - Re: [Xen-devel] Re: [PATCH 06/16] xen: disable PAT

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Sun, 10 May 2009 10:21:48 +0100
From:	Keir Fraser <keir.fraser@...citrix.com>
To:	"H. Peter Anvin" <hpa@...or.com>
CC:	Alan Cox <alan@...rguk.ukuu.org.uk>,
	Ian Campbell <Ian.Campbell@...citrix.com>,
	Jeremy Fitzhardinge <jeremy@...p.org>,
	the arch/x86 maintainers <x86@...nel.org>,
	Suresh Siddha <suresh.b.siddha@...el.com>,
	"Linux@...or.com" <Linux@...or.com>,
	"Pallipadi, Venkatesh" <venkatesh.pallipadi@...el.com>,
	Kernel Mailing List <linux-kernel@...r.kernel.org>,
	Jeremy Fitzhardinge <Jeremy.Fitzhardinge@...rix.com>,
	Xen-devel <xen-devel@...ts.xensource.com>,
	Jan Beulich <jbeulich@...ell.com>, Ingo Molnar <mingo@...e.hu>,
	Lu <yinghai@...nel.org>, Thomas Gleixner <tglx@...utronix.de>,
	Arjan van de Ven <arjan@...radead.org>
Subject: Re: [Xen-devel] Re: [PATCH 06/16] xen: disable PAT

On 09/05/2009 19:36, "H. Peter Anvin" <hpa@...or.com> wrote:

>> My suggestion is that Xen changes its PAT[1] from WT to WC. AFAIK only
>> suse's Linux port is currently using Xen's PAT support, and it does not
>> actually use the WT cache attribute. Then Xen's PAT[0-3] would match what
>> Linux expects, and Linux apparently does not risk using PAT[4-7] because of
>> processor errata so their values are irrelevant. Linux can check that it is
>> running on Xen with suitable PAT setup by reading MSR_IA32_CR_PAT and
>> checking PAT[0-3], and only enable PAT usage in case of a match.
> 
> There exists at least one processor erratum where the CPU will use
> PAT[4-7] when the user requested PAT[0-3].  For those CPUs, it is unsafe
> for *any* OS to have PAT[4-7] != PAT[0-3].

Would it be unreasonable for us to disable PAT on such processors?

An alternative would be to set up PAT according to a new elfnote in the dom0
kernel image, and then only expose the PAT feature flag to domU kernels that
have matching PAT configuration. No elfnote would mean use Xen's existing
PAT setup (or if that's very dangerous then disable PAT altogether, perhaps
dependent on CPU model/stepping?).

 -- Keir


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/