mirror/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
0dc2a76092d9d513f5ea5eb3992d1459a67a3e7a
linux/arch
History
Rick Edgecombe 0dc2a76092 x86/cpufeatures: Enable CET CR4 bit for shadow stack 
Setting CR4.CET is a prerequisite for utilizing any CET features, most of
which also require setting MSRs.

Kernel IBT already enables the CET CR4 bit when it detects IBT HW support
and is configured with kernel IBT. However, future patches that enable
userspace shadow stack support will need the bit set as well. So change
the logic to enable it in either case.

Clear MSR_IA32_U_CET in cet_disable() so that it can't live to see
userspace in a new kexec-ed kernel that has CR4.CET set from kernel IBT.

Co-developed-by: Yu-cheng Yu <yu-cheng.yu@intel.com>
Signed-off-by: Yu-cheng Yu <yu-cheng.yu@intel.com>
Signed-off-by: Rick Edgecombe <rick.p.edgecombe@intel.com>
Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com>
Reviewed-by: Borislav Petkov (AMD) <bp@alien8.de>
Reviewed-by: Kees Cook <keescook@chromium.org>
Acked-by: Mike Rapoport (IBM) <rppt@kernel.org>
Tested-by: Pengfei Xu <pengfei.xu@intel.com>
Tested-by: John Allen <john.allen@amd.com>
Tested-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/all/20230613001108.3040476-39-rick.p.edgecombe%40intel.com
2023-08-02 15:01:51 -07:00
..
alpha
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
arc
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
arm
x86/shstk: Add user control-protection fault handler
2023-08-02 15:01:50 -07:00
arm64
x86/shstk: Add user control-protection fault handler
2023-08-02 15:01:50 -07:00
csky
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
hexagon
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
ia64
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
loongarch
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
m68k
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
microblaze
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
mips
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
nios2
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
openrisc
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
parisc
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
powerpc
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
riscv
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
s390
mm: Move pte/pmd_mkwrite() callers with no VMA to _novma()
2023-07-11 14:10:57 -07:00
sh
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
sparc
x86/shstk: Add user control-protection fault handler
2023-08-02 15:01:50 -07:00
um
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
x86
x86/cpufeatures: Enable CET CR4 bit for shadow stack
2023-08-02 15:01:51 -07:00
xtensa
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00
.gitignore
…
Kconfig
mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()
2023-07-11 14:10:56 -07:00