From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.2 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id A4ECBC388F7 for ; Sat, 7 Nov 2020 15:28:25 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id 22F6320719 for ; Sat, 7 Nov 2020 15:28:25 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 22F6320719 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=enjellic.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id 6C1A46B0036; Sat, 7 Nov 2020 10:28:24 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 670E16B005D; Sat, 7 Nov 2020 10:28:24 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 5389E6B0068; Sat, 7 Nov 2020 10:28:24 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0179.hostedemail.com [216.40.44.179]) by kanga.kvack.org (Postfix) with ESMTP id 279916B0036 for ; Sat, 7 Nov 2020 10:28:24 -0500 (EST) Received: from smtpin08.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay03.hostedemail.com (Postfix) with ESMTP id CB8D68249980 for ; Sat, 7 Nov 2020 15:28:23 +0000 (UTC) X-FDA: 77458003686.08.coast49_58069a0272dc Received: from filter.hostedemail.com (10.5.16.251.rfc1918.com [10.5.16.251]) by smtpin08.hostedemail.com (Postfix) with ESMTP id AB5951819E76F for ; Sat, 7 Nov 2020 15:28:23 +0000 (UTC) X-HE-Tag: coast49_58069a0272dc X-Filterd-Recvd-Size: 4862 Received: from wind.enjellic.com (wind.enjellic.com [76.10.64.91]) by imf33.hostedemail.com (Postfix) with ESMTP for ; Sat, 7 Nov 2020 15:28:22 +0000 (UTC) Received: from wind.enjellic.com (localhost [127.0.0.1]) by wind.enjellic.com (8.15.2/8.15.2) with ESMTP id 0A7FRxAi029719; Sat, 7 Nov 2020 09:27:59 -0600 Received: (from greg@localhost) by wind.enjellic.com (8.15.2/8.15.2/Submit) id 0A7FRwYv029718; Sat, 7 Nov 2020 09:27:58 -0600 Date: Sat, 7 Nov 2020 09:27:58 -0600 From: "Dr. Greg" To: Matthew Wilcox Cc: Jarkko Sakkinen , x86@kernel.org, linux-sgx@vger.kernel.org, linux-kernel@vger.kernel.org, Sean Christopherson , linux-mm@kvack.org, Andrew Morton , Jethro Beekman , Darren Kenny , andriy.shevchenko@linux.intel.com, asapek@google.com, bp@alien8.de, cedric.xing@intel.com, chenalexchen@google.com, conradparker@google.com, cyhanish@google.com, dave.hansen@intel.com, haitao.huang@intel.com, kai.huang@intel.com, kai.svahn@intel.com, kmoy@google.com, ludloff@google.com, luto@kernel.org, nhorman@redhat.com, npmccallum@redhat.com, puiterwijk@redhat.com, rientjes@google.com, tglx@linutronix.de, yaozhangx@google.com, mikko.ylinen@intel.com Subject: Re: [PATCH v40 10/24] mm: Add 'mprotect' hook to struct vm_operations_struct Message-ID: <20201107152758.GB29530@wind.enjellic.com> Reply-To: "Dr. Greg" References: <20201104145430.300542-1-jarkko.sakkinen@linux.intel.com> <20201104145430.300542-11-jarkko.sakkinen@linux.intel.com> <20201106174359.GA24109@wind.enjellic.com> <20201106211311.GT17076@casper.infradead.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20201106211311.GT17076@casper.infradead.org> User-Agent: Mutt/1.4i X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.2.3 (wind.enjellic.com [127.0.0.1]); Sat, 07 Nov 2020 09:28:00 -0600 (CST) X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Fri, Nov 06, 2020 at 09:13:11PM +0000, Matthew Wilcox wrote: > On Fri, Nov 06, 2020 at 11:43:59AM -0600, Dr. Greg wrote: > > The 900 pound primate in the room, that no one is acknowledging, is > > that this technology was designed to not allow the operating system to > > have any control over what it is doing. In the mindset of kernel > > developers, the operating system is the absolute authority on > > security, so we find ourselves in a situation where the kernel needs > > to try and work around this fact so any solutions will be imperfect at > > best. > > > > As I've noted before, this is actually a primary objective of enclave > > authors, since one of the desires for 'Confidential Computing' is to > > hide things like proprietary algorithms from the platform owners. I > > think the driver needs to acknowledge this fact and equip platform > > owners with the simplest and most effective security solutions that > > are available. > Or we need to not merge "technology" that subverts the owner of the > hardware. Remember: root kit authors are inventive buggers. That will be an interesting philosophical argument for Linux moving forward. I've often stated that there is going to be a natural political tension between the objectives of open-source and advances in platform security. By definition, advancing the latter will result in technology that contrains what can be done with a platform. It may have made more sense for the SGX driver to be mainline when the technology was going to be ubiquitous. Given the decision by Intel to monetize the platform, by limiting its implementation to high end server platforms, the case could be made that it is a driver best supported by the distributions or cloud providers. I'm neither for or against inclusion, I'm simply advocating that we make informed decisions on the driver implementation that benefits the user community. FWIW, based on knowledge that has come from building application stacks on top of the technology for a half decade now. Have a good weekend. Dr. Greg As always, Dr. Greg Wettstein, Ph.D, Worker Autonomously self-defensive Enjellic Systems Development, LLC IOT platforms and edge devices. 4206 N. 19th Ave. Fargo, ND 58102 PH: 701-281-1686 EMAIL: greg@enjellic.com ------------------------------------------------------------------------------ "Atilla The Hun's Maxim: If you're going to rape, pillage and burn, be sure to do things in that order." -- P.J. Plauger Programming On Purpose