linux-kernel - Re: [patch 17/24] x86/speculation: Move IBPB control out of switch

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.DEB.2.21.1811221015140.1571@nanos.tec.linutronix.de>
Date:   Thu, 22 Nov 2018 10:18:43 +0100 (CET)
From:   Thomas Gleixner <tglx@...utronix.de>
To:     Jiri Kosina <jikos@...nel.org>
cc:     Andi Kleen <ak@...ux.intel.com>,
        LKML <linux-kernel@...r.kernel.org>, x86@...nel.org,
        Peter Zijlstra <peterz@...radead.org>,
        Andy Lutomirski <luto@...nel.org>,
        Linus Torvalds <torvalds@...ux-foundation.org>,
        Tom Lendacky <thomas.lendacky@....com>,
        Josh Poimboeuf <jpoimboe@...hat.com>,
        Andrea Arcangeli <aarcange@...hat.com>,
        David Woodhouse <dwmw@...zon.co.uk>,
        Dave Hansen <dave.hansen@...el.com>,
        Casey Schaufler <casey.schaufler@...el.com>,
        Asit Mallick <asit.k.mallick@...el.com>,
        Arjan van de Ven <arjan@...ux.intel.com>,
        Jon Masters <jcm@...hat.com>,
        Waiman Long <longman9394@...il.com>,
        Greg KH <gregkh@...uxfoundation.org>,
        Dave Stewart <david.c.stewart@...el.com>,
        Kees Cook <keescook@...omium.org>
Subject: Re: [patch 17/24] x86/speculation: Move IBPB control out of
 switch_mm()

On Thu, 22 Nov 2018, Jiri Kosina wrote:
> On Wed, 21 Nov 2018, Andi Kleen wrote:
> 
> > > +		 * This could be optimized by keeping track of the last
> > > +		 * user task per cpu and avoiding the barrier when the task
> > > +		 * is immediately scheduled back and the thread inbetween
> > > +		 * was a kernel thread. It's dubious whether that'd be
> > > +		 * worth the extra load/store and conditional operations.
> > > +		 * Keep it optimized for the common case where the TIF bit
> > > +		 * is not set.
> > > +		 */
> > 
> > The optimization was there before and you removed it?
> > 
> > It's quite important for switching to idle and back. With your variant short IOs
> > that do short idle waits will be badly impacted. 
> 
> The question is what scenario to optimize for.
> 
> Either you penalize everybody in the default prctl+seccomp setup 
> (irrespective of it's TIF flag value), as you have the extra overhead on 
> each and every switch_to() (to check exactly for this back-to-back 
> scheduling), or you penalize only those tasks that are penalized anyway by 
> the IBPB flush.
> 
> I think the latter (which is what this patch implements) makes more sense. 

That was my rationale. The back to back thing makes sense for unconditional
mode, but not so much for the prctl/seccomp case which is default.

In unconditional mode we could add the extra overhead, but then performance
is down the drain already with STIBP.

Thanks,

	tglx