linux-kernel - Re: [PATCH v4 01/15] s390: zcrypt: externalize AP instructions available function

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:   Tue, 17 Apr 2018 14:44:39 +0200
From:   Pierre Morel <pmorel@...ux.vnet.ibm.com>
To:     Harald Freudenberger <FREUDE@...ibm.com>
Cc:     Tony Krowiak <akrowiak@...ux.vnet.ibm.com>,
        alex.williamson@...hat.com, alifm@...ux.vnet.ibm.com,
        berrange@...hat.com, bjsdjshi@...ux.vnet.ibm.com,
        borntrae@...ux.ibm.com, cohuck@...hat.com,
        fiuczy@...ux.vnet.ibm.com, heicars2@...ux.vnet.ibm.com,
        jjherne@...ux.vnet.ibm.com, kvm@...r.kernel.org,
        kwankhede@...dia.com, linux-kernel@...r.kernel.org,
        linux-s390@...r.kernel.org, mjrosato@...ux.vnet.ibm.com,
        mschwid2@...ux.vnet.ibm.com, pasic@...ux.vnet.ibm.com,
        pbonzini@...hat.com, Reinhard Buendgen <BUENDGEN@...ibm.com>,
        thuth@...hat.com
Subject: Re: [PATCH v4 01/15] s390: zcrypt: externalize AP instructions
 available function

On 17/04/2018 09:01, Harald Freudenberger wrote:
> Hi Pierre
>
> The AP bus can no longer get compiled as a module. There is a (unbeautiful)
> trick done in the Makefile:
>
> ...
> ap-objs := ap_bus.o ap_card.o ap_queue.o
> obj-$(subst m,y,$(CONFIG_ZCRYPT)) += ap.o
> # zcrypt_api.o and zcrypt_msgtype*.o depend on ap.o
> ...
>
> which makes sure there is either no AP support in the kernel or it is
> always static.

Hi,

AP can not be compiled as a kernel module but...
we can set ZCRYPT=m in the configuration which means
that the ZCRYPT definition will be CONFIG_ZCRYPT_MODULE and not 
CONFIG_ZCRYPT.

Regards,

Pierre


>
> Mit freundlichen Grüßen / Kind regards
>
>      Harald Freudenberger
>
>
> IBM Systems &Technology Group, zLinux Development
> ----------------------------------------------------------------------------------
>
> IBM Deutschland
> Schoenaicher Str. 220
> 71032 Boeblingen
> Phone: +49-7031-16-5152
> E-Mail: freude@...ibm.com
> ----------------------------------------------------------------------------------
>
> IBM Deutschland Research & Development GmbH
> Vorsitzender des Aufsichtsrats: Martina Koederitz
> Geschäftsführung: Dirk Wittkopp
> Sitz der Gesellschaft: Böblingen
> Registergericht: Amtsgericht Stuttgart, HRB 243294
> ------------------------------------------------------------------------------------
>
>
>
> From:	Pierre Morel <pmorel@...ux.vnet.ibm.com>
> To:	Tony Krowiak <akrowiak@...ux.vnet.ibm.com>,
>              linux-s390@...r.kernel.org, linux-kernel@...r.kernel.org,
>              kvm@...r.kernel.org
> Cc:	Harald Freudenberger/Germany/IBM@...DE,
>              mschwid2@...ux.vnet.ibm.com, heicars2@...ux.vnet.ibm.com,
>              borntrae@...ux.ibm.com, cohuck@...hat.com,
>              kwankhede@...dia.com, bjsdjshi@...ux.vnet.ibm.com,
>              pbonzini@...hat.com, alex.williamson@...hat.com,
>              alifm@...ux.vnet.ibm.com, mjrosato@...ux.vnet.ibm.com,
>              jjherne@...ux.vnet.ibm.com, thuth@...hat.com,
>              pasic@...ux.vnet.ibm.com, berrange@...hat.com,
>              fiuczy@...ux.vnet.ibm.com, Reinhard Buendgen/Germany/IBM@...DE
> Date:	16.04.2018 17:59
> Subject:	Re: [PATCH v4 01/15] s390: zcrypt: externalize AP instructions
>              available function
>
>
>
> On 15/04/2018 23:22, Tony Krowiak wrote:
>> If the AP instructions are not available on the linux host, then
>> AP devices can not be interpreted by the SIE. The AP bus has a
>> function it uses to determine if the AP instructions are
>> available. This patch provides a new function that wraps the
>> AP bus's function to externalize it for use by KVM.
>>
>> Signed-off-by: Tony Krowiak <akrowiak@...ux.vnet.ibm.com>
>> Reviewed-by: Pierre Morel <pmorel@...ux.vnet.ibm.com>
>> Reviewed-by: Harald Freudenberger <freude@...ux.vnet.ibm.com>
>> ---
>>    arch/s390/include/asm/ap.h     |    7 +++++++
>>    arch/s390/include/asm/kvm-ap.h |   23 +++++++++++++++++++++++
>>    arch/s390/kvm/Makefile         |    2 +-
>>    arch/s390/kvm/kvm-ap.c         |   21 +++++++++++++++++++++
>>    drivers/s390/crypto/ap_bus.c   |    6 ++++++
>>    5 files changed, 58 insertions(+), 1 deletions(-)
>>    create mode 100644 arch/s390/include/asm/kvm-ap.h
>>    create mode 100644 arch/s390/kvm/kvm-ap.c
>>
>> diff --git a/arch/s390/include/asm/ap.h b/arch/s390/include/asm/ap.h
>> index c1bedb4..7773bfd 100644
>> --- a/arch/s390/include/asm/ap.h
>> +++ b/arch/s390/include/asm/ap.h
>> @@ -120,4 +120,11 @@ struct ap_queue_status ap_queue_irq_ctrl(ap_qid_t
> qid,
>>    		 		 		 		 		  struct
> ap_qirq_ctrl qirqctrl,
>>    		 		 		 		 		  void *ind);
>>
>> +/**
>> + * ap_instructions_installed() - Tests whether AP instructions are
> installed
>> + *
>> + * Returns 1 if the AP instructions are installed, otherwise; returns 0
>> + */
>> +int ap_instructions_installed(void);
>> +
>>    #endif /* _ASM_S390_AP_H_ */
>> diff --git a/arch/s390/include/asm/kvm-ap.h
> b/arch/s390/include/asm/kvm-ap.h
>> new file mode 100644
>> index 0000000..84412a9
>> --- /dev/null
>> +++ b/arch/s390/include/asm/kvm-ap.h
>> @@ -0,0 +1,23 @@
>> +// SPDX-License-Identifier: GPL-2.0+
>> +/*
>> + * Adjunct Processor (AP) configuration management for KVM guests
>> + *
>> + * Copyright IBM Corp. 2018
>> + *
>> + * Author(s): Tony Krowiak <akrowia@...ux.vnet.ibm.com>
>> + */
>> +
>> +#ifndef _ASM_KVM_AP
>> +#define _ASM_KVM_AP
>> +
>> +/**
>> + * kvm_ap_instructions_installed()
>> + *
>> + * Tests whether AP instructions are installed on the linux host
>> + *
>> + * Returns 1 if the AP instructions are installed on the host,
> otherwise;
>> + * returns 0
>> + */
>> +int kvm_ap_instructions_installed(void);
>> +
>> +#endif /* _ASM_KVM_AP */
>> diff --git a/arch/s390/kvm/Makefile b/arch/s390/kvm/Makefile
>> index 05ee90a..1876bfe 100644
>> --- a/arch/s390/kvm/Makefile
>> +++ b/arch/s390/kvm/Makefile
>> @@ -9,6 +9,6 @@ common-objs = $(KVM)/kvm_main.o $(KVM)/eventfd.o  $
> (KVM)/async_pf.o $(KVM)/irqch
>>    ccflags-y := -Ivirt/kvm -Iarch/s390/kvm
>>
>>    kvm-objs := $(common-objs) kvm-s390.o intercept.o interrupt.o priv.o
> sigp.o
>> -kvm-objs += diag.o gaccess.o guestdbg.o vsie.o
>> +kvm-objs += diag.o gaccess.o guestdbg.o vsie.o kvm-ap.o
>>
>>    obj-$(CONFIG_KVM) += kvm.o
>> diff --git a/arch/s390/kvm/kvm-ap.c b/arch/s390/kvm/kvm-ap.c
>> new file mode 100644
>> index 0000000..1267588
>> --- /dev/null
>> +++ b/arch/s390/kvm/kvm-ap.c
>> @@ -0,0 +1,21 @@
>> +// SPDX-License-Identifier: GPL-2.0+
>> +/*
>> + * Adjunct Processor (AP) configuration management for KVM guests
>> + *
>> + * Copyright IBM Corp. 2018
>> + *
>> + * Author(s): Tony Krowiak <akrowia@...ux.vnet.ibm.com>
>> + */
>> +#include <linux/kernel.h>
>> +#include <asm/kvm-ap.h>
>> +#include <asm/ap.h>
>> +
>> +int kvm_ap_instructions_installed(void)
>> +{
>> +#ifdef CONFIG_ZCRYPT
> if you do this take care that ZCRYPT may be a module ;)
>
>> +		 return ap_instructions_installed();
>> +#else
>> +		 return 0;
>> +#endif
>> +}
>> +EXPORT_SYMBOL(kvm_ap_instructions_installed);
>> diff --git a/drivers/s390/crypto/ap_bus.c b/drivers/s390/crypto/ap_bus.c
>> index 35a0c2b..9d108b6 100644
>> --- a/drivers/s390/crypto/ap_bus.c
>> +++ b/drivers/s390/crypto/ap_bus.c
>> @@ -210,6 +210,12 @@ int ap_query_configuration(struct ap_config_info
> *info)
>>    }
>>    EXPORT_SYMBOL(ap_query_configuration);
>>
>> +int ap_instructions_installed(void)
>> +{
>> +		 return (ap_instructions_available() == 0);
>> +}
>> +EXPORT_SYMBOL(ap_instructions_installed);
>> +
>>    /**
>>     * ap_init_configuration(): Allocate and query configuration array.
>>     */
>
> --
> Pierre Morel
> Linux/KVM/QEMU in Böblingen - Germany
>
>
>
>

-- 
Pierre Morel
Linux/KVM/QEMU in Böblingen - Germany