linux-kernel - Re: [PATCH v6 0/3] Introduce 64b relocatable kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <mhng-dd5e2fdf-d349-4114-9cbf-6041e2cd2b27@palmerdabbelt-glaptop>
Date:   Wed, 30 Jun 2021 22:42:24 -0700 (PDT)
From:   Palmer Dabbelt <palmer@...belt.com>
To:     alex@...ti.fr
CC:     mpe@...erman.id.au, benh@...nel.crashing.org, paulus@...ba.org,
        Paul Walmsley <paul.walmsley@...ive.com>,
        aou@...s.berkeley.edu, linuxppc-dev@...ts.ozlabs.org,
        linux-kernel@...r.kernel.org, linux-riscv@...ts.infradead.org
Subject:     Re: [PATCH v6 0/3] Introduce 64b relocatable kernel

On Thu, 17 Jun 2021 06:33:48 PDT (-0700), alex@...ti.fr wrote:
> Le 18/05/2021 à 12:12, Alexandre Ghiti a écrit :
>> After multiple attempts, this patchset is now based on the fact that the
>> 64b kernel mapping was moved outside the linear mapping.
>>
>> The first patch allows to build relocatable kernels but is not selected
>> by default. That patch should ease KASLR implementation a lot.
>> The second and third patches take advantage of an already existing powerpc
>> script that checks relocations at compile-time, and uses it for riscv.
>
> @Palmer, any thought about that? There are no users for now, do you want
> to wait for a KASLR implementation to use it before merging this? If so,
> I can work on a KASLR implementation based on older implementation from
> Zong.

Sorry, I must have missed this patch set the first time through.  I 
don't see any reason to wait for KASLR before taking support for 
relocatable kernels, as relocatable kernelsa are useful on their own.

I'm not sure I'll have time to look at this for this cycle, but I'll try 
to find some time to given that it was posted a while ago.

>
> Thanks,
>
>>
>> This patchset was tested on:
>>
>> * kernel:
>> - rv32: OK
>> - rv64 with RELOCATABLE: OK and checked that "suspicious" relocations are caught.
>> - rv64 without RELOCATABLE: OK
>> - powerpc: build only and checked that "suspicious" relocations are caught.
>>
>> * xipkernel:
>> - rv32: build only
>> - rv64: OK
>>
>> * nommukernel:
>> - rv64: build only
>>
>> Changes in v6:
>>    * Remove the kernel move to vmalloc zone
>>    * Rebased on top of for-next
>>    * Remove relocatable property from 32b kernel as the kernel is mapped in
>>      the linear mapping and would then need to be copied physically too
>>    * CONFIG_RELOCATABLE depends on !XIP_KERNEL
>>    * Remove Reviewed-by from first patch as it changed a bit
>>
>> Changes in v5:
>>    * Add "static __init" to create_kernel_page_table function as reported by
>>      Kbuild test robot
>>    * Add reviewed-by from Zong
>>    * Rebase onto v5.7
>>
>> Changes in v4:
>>    * Fix BPF region that overlapped with kernel's as suggested by Zong
>>    * Fix end of module region that could be larger than 2GB as suggested by Zong
>>    * Fix the size of the vm area reserved for the kernel as we could lose
>>      PMD_SIZE if the size was already aligned on PMD_SIZE
>>    * Split compile time relocations check patch into 2 patches as suggested by Anup
>>    * Applied Reviewed-by from Zong and Anup
>>
>> Changes in v3:
>>    * Move kernel mapping to vmalloc
>>
>> Changes in v2:
>>    * Make RELOCATABLE depend on MMU as suggested by Anup
>>    * Rename kernel_load_addr into kernel_virt_addr as suggested by Anup
>>    * Use __pa_symbol instead of __pa, as suggested by Zong
>>    * Rebased on top of v5.6-rc3
>>    * Tested with sv48 patchset
>>    * Add Reviewed/Tested-by from Zong and Anup
>>
>> Alexandre Ghiti (3):
>>    riscv: Introduce CONFIG_RELOCATABLE
>>    powerpc: Move script to check relocations at compile time in scripts/
>>    riscv: Check relocations at compile time
>>
>>   arch/powerpc/tools/relocs_check.sh | 18 ++--------
>>   arch/riscv/Kconfig                 | 12 +++++++
>>   arch/riscv/Makefile                |  5 ++-
>>   arch/riscv/Makefile.postlink       | 36 ++++++++++++++++++++
>>   arch/riscv/kernel/vmlinux.lds.S    |  6 ++++
>>   arch/riscv/mm/Makefile             |  4 +++
>>   arch/riscv/mm/init.c               | 53 +++++++++++++++++++++++++++++-
>>   arch/riscv/tools/relocs_check.sh   | 26 +++++++++++++++
>>   scripts/relocs_check.sh            | 20 +++++++++++
>>   9 files changed, 162 insertions(+), 18 deletions(-)
>>   create mode 100644 arch/riscv/Makefile.postlink
>>   create mode 100755 arch/riscv/tools/relocs_check.sh
>>   create mode 100755 scripts/relocs_check.sh
>>