linux-kernel - Re: [PATCH 05/13] efi/x86: don't map the entire kernel text RW for mixed mode

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <b6006dd7-2ce0-0776-9a61-52377b8eef63@suse.cz>
Date:   Thu, 9 Apr 2020 12:09:44 +0200
From:   Jiri Slaby <jslaby@...e.cz>
To:     Ard Biesheuvel <ardb@...nel.org>
Cc:     Gary Lin <glin@...e.com>, linux-efi <linux-efi@...r.kernel.org>,
        Ingo Molnar <mingo@...nel.org>,
        Thomas Gleixner <tglx@...utronix.de>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        Anshuman Khandual <anshuman.khandual@....com>,
        Arnd Bergmann <arnd@...db.de>,
        Dan Williams <dan.j.williams@...el.com>,
        Dave Young <dyoung@...hat.com>,
        Saravana Kannan <saravanak@...gle.com>
Subject: Re: [PATCH 05/13] efi/x86: don't map the entire kernel text RW for
 mixed mode

On 09. 04. 20, 11:09, Ard Biesheuvel wrote:
> On Thu, 9 Apr 2020 at 10:36, Jiri Slaby <jslaby@...e.cz> wrote:
>>
>> On 09. 04. 20, 10:19, Ard Biesheuvel wrote:
>>>>>> $ rpm -qlp ~/Downloads/ovmf-202002-1.1.i586.rpm
>>>>>> warning: /home/ardbie01/Downloads/ovmf-202002-1.1.i586.rpm: Header V3
>>>>>> RSA/SHA256 Signature, key ID 3dbdc284: NOKEY
>>>>>> /usr/share/doc/packages/ovmf
>>>>>> /usr/share/doc/packages/ovmf/README
>>>>>
>>>>> Hmmm, it's weird that OBS doesn't list all derived files.
>>>>> Anyway, the ia32 ovmf is available in
>>>>> http://download.opensuse.org/tumbleweed/repo/oss/noarch/qemu-ovmf-ia32-202002-1.1.noarch.rpm
>>>>
>>>> It indeed does:
>>>> https://build.opensuse.org/package/binaries/openSUSE:Factory/ovmf/standard
>>>>
>>>> Note that the ia32 version is noarch, built on i586.
>>>>
>>>
>>> I am not able to reproduce this issue using the linked firmware image
>>> and a 5.6 x86_64_defconfig with efivarfs built in.
>>
>> Yeah, I had to use the distro config too. Not sure what the trigger is.
>> Maybe some NUMA configs or something.
>>
>>> Could anyone share the full log, please, along with the kernel config
>>> that was used?
>>
>> Both uploaded:
>> http://decibel.fi.muni.cz/~xslaby/err/
>>
> 
> With the same config, I am still not seeing the issue.
> 
> 
>> Note that I switched the for-me-necessary =m configs to =y. So that it
>> is enough to build bzImage, w/o modules...
>>
> 
> Could you please try running it again with CONFIG_EFI_PGT_DUMP=y enabled?

No problem:
http://decibel.fi.muni.cz/~xslaby/err/dmesg2.txt

> In the mean time, I will try to install Tumbleweed from scratch. Do
> you have any steps I could follow to reproduce your setup?

Not really, just installed TW 64-bit and used efi and grub 32 bit.

-- 
js
suse labs