linux-kernel - Re: [PATCH V10 08/44] Documentation/pkeys: Add initial PKS documentation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 9 May 2022 15:03:48 -0700
From:   Kees Cook <keescook@...omium.org>
To:     ira.weiny@...el.com
Cc:     Dave Hansen <dave.hansen@...ux.intel.com>,
        "H. Peter Anvin" <hpa@...or.com>,
        Dan Williams <dan.j.williams@...el.com>,
        Fenghua Yu <fenghua.yu@...el.com>,
        Rick Edgecombe <rick.p.edgecombe@...el.com>,
        "Shankar, Ravi V" <ravi.v.shankar@...el.com>,
        linux-kernel@...r.kernel.org
Subject: Re: [PATCH V10 08/44] Documentation/pkeys: Add initial PKS
 documentation

On Tue, Apr 19, 2022 at 10:06:13AM -0700, ira.weiny@...el.com wrote:
> From: Ira Weiny <ira.weiny@...el.com>
> 
> Add initial overview and configuration information about PKS.
> 
> Cc: "Moger, Babu" <Babu.Moger@....com>
> Signed-off-by: Ira Weiny <ira.weiny@...el.com>
> 
> ---
> Changes for V9
> 	Feedback from Dave Hansen
> 		Remove overview and move relevant text to the main pkey
> 		overview which covers both user ans kernel keys.
> 		Add an example of using Kconfig
> 		Move MSR details to later patches
> ---
>  Documentation/core-api/protection-keys.rst | 43 ++++++++++++++++++++--
>  1 file changed, 39 insertions(+), 4 deletions(-)
> 
> diff --git a/Documentation/core-api/protection-keys.rst b/Documentation/core-api/protection-keys.rst
> index bf28ac0401f3..13eedb0119e1 100644
> --- a/Documentation/core-api/protection-keys.rst
> +++ b/Documentation/core-api/protection-keys.rst
> @@ -13,6 +13,11 @@ Pkeys Userspace (PKU) is a feature which can be found on:
>          * Intel client CPUs, Tiger Lake (11th Gen Core) and later
>          * Future AMD CPUs
>  
> +Protection Keys Supervisor (PKS) is a feature which can be found on:
> +        * Sapphire Rapids (and later) "Scalable Processor" Server CPUs
> +        * Future non-server Intel parts.
> +        * qemu: https://www.qemu.org/2021/04/30/qemu-6-0-0/

It looks like QEMU has pass-through support, but not emulation? It'd be
really nice to have this feature emulated so it would be possible to
test the code. (Or I need to find a machine that supports this...)

-- 
Kees Cook