linux-kernel - Re: [GIT pull] x86/cache: Updates for 4.10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.DEB.2.20.1612130916100.3415@nanos>
Date:   Tue, 13 Dec 2016 10:01:17 +0100 (CET)
From:   Thomas Gleixner <tglx@...utronix.de>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
cc:     LKML <linux-kernel@...r.kernel.org>,
        Andrew Morton <akpm@...ux-foundation.org>,
        Ingo Molnar <mingo@...nel.org>,
        "H. Peter Anvin" <hpa@...or.com>
Subject: Re: [GIT pull] x86/cache: Updates for 4.10

On Mon, 12 Dec 2016, Linus Torvalds wrote:

> On Mon, Dec 12, 2016 at 1:53 AM, Thomas Gleixner <tglx@...utronix.de> wrote:
> >
> > This update provides the support for Intel Cache Allocation Technology, a
> > cache partitioning mechanism.

Sorry for being terse in the pull request.

> Ugh, this is some funky stuff. And it's entirely x86-specific, with a
> rather odd special filesystem interface.

Yes. The interface is odd, but the hardware interface of that CAT stuff is
odd as well.

We tried hard to come up with an abstraction, but that only allows rather
simple partitioning, but no way of sharing and dealing with the per package
nature of this mechanism.

In the end we decided to expose the allocation bitmaps directly so all
combinations of the hardware can be utilized.

There are two ways of associating a cache partition:

 - Task

   A task can be added to a resource group. It uses the cache partition
   associated to the group.

 - CPU

   All tasks which are not member of a resource group use the group to
   which the CPU they are running on is associated with.

   That allows for simple CPU based partitioning schemes.

> It looks pretty self-contained (good), but it also looks majorly
> strange. I will have to think about this. What are the main/expected
> users?

 - Virtualization so a VM can only trash only the associated part of the
   cash w/o disturbing others

 - Real-Time systems to seperate RT and general workloads. 

 - Latency sensitive enterprise workloads 

 - In theory this also can be used to protect against cache side channel
   attacks.

Thanks,

	tglx