From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id F0400C433FE for ; Mon, 3 Oct 2022 13:40:20 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 60AEF6B0072; Mon, 3 Oct 2022 09:40:20 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 5BAEC6B0073; Mon, 3 Oct 2022 09:40:20 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 434208E0001; Mon, 3 Oct 2022 09:40:20 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0011.hostedemail.com [216.40.44.11]) by kanga.kvack.org (Postfix) with ESMTP id 2BDC16B0072 for ; Mon, 3 Oct 2022 09:40:20 -0400 (EDT) Received: from smtpin24.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay07.hostedemail.com (Postfix) with ESMTP id C5188160BDF for ; Mon, 3 Oct 2022 13:40:19 +0000 (UTC) X-FDA: 79979747358.24.BE8C8B0 Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) by imf04.hostedemail.com (Postfix) with ESMTP id 42FC74001C for ; Mon, 3 Oct 2022 13:40:18 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1664804418; x=1696340418; h=date:from:to:cc:subject:message-id:references: mime-version:in-reply-to; bh=+5qCpWO+BAGW3ExOyW3chioNW0LHy3lT3j4pg7MiQnQ=; b=hQsE4mDvSPtYbw6susVruUko2PY1Nnn7L23DBHuqZN54HZlfps9p8r2+ 1M7Q4lVW9xWInJx+xfZoOby5VNLoKzhXly16xWDmNNTAnlUpQR7IWDwZy ax/6Jc3wtNLTvpoAwqj/eYCWs7QqXJYu5z6g4E+KXDIPXvFZzpBHh+euj iDBZXEDOSe8gldpduUrsAreu6hjncuRtzh2anl2fJFrVhXctf1lLabRN4 UJ8FWs+r675ziopLO0TrgJdawezhdEUqAv6PKb8FmM4W9H831apdHcKng fEcTLJ9dlLr3K1EUujas/HjU9ENpyZBmTMJRvx8E0BmdycaZbDMuPQza2 A==; X-IronPort-AV: E=McAfee;i="6500,9779,10489"; a="300235793" X-IronPort-AV: E=Sophos;i="5.93,365,1654585200"; d="scan'208";a="300235793" Received: from fmsmga005.fm.intel.com ([10.253.24.32]) by fmsmga102.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 03 Oct 2022 06:40:16 -0700 X-IronPort-AV: E=McAfee;i="6500,9779,10489"; a="952343480" X-IronPort-AV: E=Sophos;i="5.93,365,1654585200"; d="scan'208";a="952343480" Received: from bandrei-mobl.ger.corp.intel.com (HELO box.shutemov.name) ([10.252.37.219]) by fmsmga005-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 03 Oct 2022 06:40:08 -0700 Received: by box.shutemov.name (Postfix, from userid 1000) id 7FA5C104CE4; Mon, 3 Oct 2022 16:40:06 +0300 (+03) Date: Mon, 3 Oct 2022 16:40:06 +0300 From: "Kirill A . Shutemov" To: Rick Edgecombe Cc: x86@kernel.org, "H . Peter Anvin" , Thomas Gleixner , Ingo Molnar , linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, linux-api@vger.kernel.org, Arnd Bergmann , Andy Lutomirski , Balbir Singh , Borislav Petkov , Cyrill Gorcunov , Dave Hansen , Eugene Syromiatnikov , Florian Weimer , "H . J . Lu" , Jann Horn , Jonathan Corbet , Kees Cook , Mike Kravetz , Nadav Amit , Oleg Nesterov , Pavel Machek , Peter Zijlstra , Randy Dunlap , "Ravi V . Shankar" , Weijiang Yang , joao.moreira@intel.com, John Allen , kcc@google.com, eranian@google.com, rppt@kernel.org, jamorris@linux.microsoft.com, dethoma@microsoft.com, Yu-cheng Yu Subject: Re: [PATCH v2 02/39] x86/cet/shstk: Add Kconfig option for Shadow Stack Message-ID: <20221003134006.yoye7dvywuec6bco@box.shutemov.name> References: <20220929222936.14584-1-rick.p.edgecombe@intel.com> <20220929222936.14584-3-rick.p.edgecombe@intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20220929222936.14584-3-rick.p.edgecombe@intel.com> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1664804418; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=69pK2oalIgOb7keyqvGeLbNijtTvKvx6jmQuSsVkny8=; b=1t+86wMlBRPezVHwdcCIm+ccP/0IXVPpXP+NS6Nqdd4Am97Xbis9aNc3eawDHCs7lGTxi1 1htd4ZyFWoHXLF6OMaI1PhjCcPWdunWWTmFXAu1bJcCQPUsjofQQtuVAuERAyGVt35yr2Q wZGE+N8o2KJyq9LMuI4v9aN/PSJP2Qg= ARC-Authentication-Results: i=1; imf04.hostedemail.com; dkim=none ("invalid DKIM record") header.d=intel.com header.s=Intel header.b=hQsE4mDv; spf=none (imf04.hostedemail.com: domain of kirill.shutemov@linux.intel.com has no SPF policy when checking 192.55.52.93) smtp.mailfrom=kirill.shutemov@linux.intel.com; dmarc=fail reason="No valid SPF" header.from=intel.com (policy=none) ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1664804418; a=rsa-sha256; cv=none; b=pywLcrz63UAQr4CIIRyD01YTtpM50vjhIcCsPZDc8LHbNl9fzi+Y7AqvYVCnEh7oKzgXIW rPIVrqVhaCsi9Cy+67gxMf5lJkpdhPw6JRwZW13PfdbjN9Akb+V+PMbor4a9sLP4L2B7zF AuTOhjLtmpvuAAQyK/ZB2BDsyw9dk5Q= X-Rspamd-Queue-Id: 42FC74001C Authentication-Results: imf04.hostedemail.com; dkim=none ("invalid DKIM record") header.d=intel.com header.s=Intel header.b=hQsE4mDv; spf=none (imf04.hostedemail.com: domain of kirill.shutemov@linux.intel.com has no SPF policy when checking 192.55.52.93) smtp.mailfrom=kirill.shutemov@linux.intel.com; dmarc=fail reason="No valid SPF" header.from=intel.com (policy=none) X-Rspamd-Server: rspam06 X-Rspam-User: X-Stat-Signature: t97s4fef3o3zoj3qd4hu1er49syu45xc X-HE-Tag: 1664804418-908779 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Thu, Sep 29, 2022 at 03:28:59PM -0700, Rick Edgecombe wrote: > From: Yu-cheng Yu > > Shadow Stack provides protection against function return address > corruption. It is active when the processor supports it, the kernel has > CONFIG_X86_SHADOW_STACK enabled, and the application is built for the > feature. This is only implemented for the 64-bit kernel. When it is > enabled, legacy non-Shadow Stack applications continue to work, but without > protection. > > Signed-off-by: Yu-cheng Yu > Co-developed-by: Rick Edgecombe > Signed-off-by: Rick Edgecombe > Cc: Kees Cook > > --- > > v2: > - Remove already wrong kernel size increase info (tlgx) > - Change prompt to remove "Intel" (tglx) > - Update line about what CPUs are supported (Dave) > > Yu-cheng v25: > - Remove X86_CET and use X86_SHADOW_STACK directly. > > Yu-cheng v24: > - Update for the splitting X86_CET to X86_SHADOW_STACK and X86_IBT. > > arch/x86/Kconfig | 18 ++++++++++++++++++ > arch/x86/Kconfig.assembler | 5 +++++ > 2 files changed, 23 insertions(+) > > diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig > index f9920f1341c8..b68eb75887b8 100644 > --- a/arch/x86/Kconfig > +++ b/arch/x86/Kconfig > @@ -26,6 +26,7 @@ config X86_64 > depends on 64BIT > # Options that are inherently 64-bit kernel only: > select ARCH_HAS_GIGANTIC_PAGE > + select ARCH_HAS_SHADOW_STACK > select ARCH_SUPPORTS_INT128 if CC_HAS_INT128 > select ARCH_USE_CMPXCHG_LOCKREF > select HAVE_ARCH_SOFT_DIRTY > @@ -1936,6 +1937,23 @@ config X86_SGX > > If unsure, say N. > > +config ARCH_HAS_SHADOW_STACK > + def_bool n Hm. Shouldn't ARCH_HAS_SHADOW_STACK definition be in arch/Kconfig, not under arch/x86? Also, I think "def_bool n" has the same meaning as just "bool", no? > + > +config X86_SHADOW_STACK > + prompt "X86 Shadow Stack" > + def_bool n Maybe just bool "X86 Shadow Stack" ? > + depends on ARCH_HAS_SHADOW_STACK > + select ARCH_USES_HIGH_VMA_FLAGS > + help > + Shadow Stack protection is a hardware feature that detects function > + return address corruption. Today the kernel's support is limited to > + virtualizing it in KVM guests. > + > + CPUs supporting shadow stacks were first released in 2020. > + > + If unsure, say N. > + > config EFI > bool "EFI runtime service support" > depends on ACPI > diff --git a/arch/x86/Kconfig.assembler b/arch/x86/Kconfig.assembler > index 26b8c08e2fc4..00c79dd93651 100644 > --- a/arch/x86/Kconfig.assembler > +++ b/arch/x86/Kconfig.assembler > @@ -19,3 +19,8 @@ config AS_TPAUSE > def_bool $(as-instr,tpause %ecx) > help > Supported by binutils >= 2.31.1 and LLVM integrated assembler >= V7 > + > +config AS_WRUSS > + def_bool $(as-instr,wrussq %rax$(comma)(%rbx)) > + help > + Supported by binutils >= 2.31 and LLVM integrated assembler > -- > 2.17.1 > -- Kiryl Shutsemau / Kirill A. Shutemov