linux-kernel - Re: [PATCH PTI v3 00/10] Clean up pgd handling and fix VSYSCALL and LDT

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20171212100955.zdnwnf4pctnsh57t@gmail.com>
Date:   Tue, 12 Dec 2017 11:09:55 +0100
From:   Ingo Molnar <mingo@...nel.org>
To:     Andy Lutomirski <luto@...nel.org>
Cc:     x86@...nel.org, linux-kernel@...r.kernel.org,
        Borislav Petkov <bp@...en8.de>,
        Brian Gerst <brgerst@...il.com>,
        David Laight <David.Laight@...lab.com>,
        Kees Cook <keescook@...omium.org>,
        Peter Zijlstra <peterz@...radead.org>
Subject: Re: [PATCH PTI v3 00/10] Clean up pgd handling and fix VSYSCALL and
 LDT


* Andy Lutomirski <luto@...nel.org> wrote:

> This should fix some existing 5-level bugs and get VSYSCALL and LDT
> working with PTI.
> 
> Changes from v1:
>  - vsyscalls actually work.
>  - Added the "Warn and fail" patch to prevent the testing goof I had on v1.
>  - Lots of cleanups
>  
> Andy Lutomirski (10):
>   x86/espfix/64: Fix espfix double-fault handling on 5-level systems
>   x86/pti: Vastly simplify pgd synchronization
>   x86/pti/64: Fix ESPFIX64 user mapping
>   Revert "x86/mm/pti: Disable native VSYSCALL"
>   x86/vsyscall/64: Explicitly set _PAGE_USER in the pagetable hierarchy
>   x86/vsyscall/64: Warn and fail vsyscall emulation in NATIVE mode
>   x86/pti: Map the vsyscall page if needed
>   x86/mm/64: Improve the memory map documentation
>   x86/mm/64: Make a full PGD-entry size hole in the memory map
>   x86/pti: Put the LDT in its own PGD if PTI is on
> 
>  Documentation/x86/x86_64/mm.txt         |  15 +--
>  arch/x86/Kconfig                        |   8 --
>  arch/x86/entry/vsyscall/vsyscall_64.c   |  37 +++++++-
>  arch/x86/include/asm/mmu_context.h      |  48 +++++++++-
>  arch/x86/include/asm/pgtable.h          |   6 +-
>  arch/x86/include/asm/pgtable_64.h       |  77 +++++++---------
>  arch/x86/include/asm/pgtable_64_types.h |   8 +-
>  arch/x86/include/asm/processor.h        |  23 +++--
>  arch/x86/include/asm/vsyscall.h         |   1 +
>  arch/x86/kernel/espfix_64.c             |  16 ----
>  arch/x86/kernel/ldt.c                   | 155 +++++++++++++++++++++++++++++--
>  arch/x86/kernel/traps.c                 |   2 +-
>  arch/x86/mm/dump_pagetables.c           |  12 +++
>  arch/x86/mm/pti.c                       | 157 ++++++++++++++++++++++----------
>  init/main.c                             |  11 ++-
>  15 files changed, 426 insertions(+), 150 deletions(-)

Hm, I only received the 0/10 boilerplate email, not any of the patches - and 
Thomas tells me he too only got the cover letter.

Thanks,

	Ingo