From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id A3FC1C02183 for ; Thu, 16 Jan 2025 17:16:47 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id EB7766B0082; Thu, 16 Jan 2025 12:16:46 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id E9A396B0083; Thu, 16 Jan 2025 12:16:46 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id C93C86B0085; Thu, 16 Jan 2025 12:16:46 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0015.hostedemail.com [216.40.44.15]) by kanga.kvack.org (Postfix) with ESMTP id A65846B0082 for ; Thu, 16 Jan 2025 12:16:46 -0500 (EST) Received: from smtpin16.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay01.hostedemail.com (Postfix) with ESMTP id 4FF621C780E for ; Thu, 16 Jan 2025 17:16:46 +0000 (UTC) X-FDA: 83013969612.16.7BBAF4C Received: from mx0a-00069f02.pphosted.com (mx0a-00069f02.pphosted.com [205.220.165.32]) by imf07.hostedemail.com (Postfix) with ESMTP id D30DB4000E for ; Thu, 16 Jan 2025 17:16:42 +0000 (UTC) Authentication-Results: imf07.hostedemail.com; dkim=pass header.d=oracle.com header.s=corp-2023-11-20 header.b=PSb0IP5W; dkim=pass header.d=oracle.onmicrosoft.com header.s=selector2-oracle-onmicrosoft-com header.b=x7ZxoCjy; dmarc=pass (policy=reject) header.from=oracle.com; spf=pass (imf07.hostedemail.com: domain of lorenzo.stoakes@oracle.com designates 205.220.165.32 as permitted sender) smtp.mailfrom=lorenzo.stoakes@oracle.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=2; s=arc-20220608; d=hostedemail.com; t=1737047803; a=rsa-sha256; cv=pass; b=0R0OKYsRdCSnnSPzN4gFzy8halliLub1VaEcXRv1up36jOW20K35Wt8UFrRN8XlxWaPweC 2RwS54SmyRs6ZkOnRERrOc7jZxJu/tiCDXZsvronRGhD1rQwMaJDREUdtF/IPx+U85BS8O 6AOacGfSH7UyWIMnxY6JvHTNjoOkGmU= ARC-Authentication-Results: i=2; imf07.hostedemail.com; dkim=pass header.d=oracle.com header.s=corp-2023-11-20 header.b=PSb0IP5W; dkim=pass header.d=oracle.onmicrosoft.com header.s=selector2-oracle-onmicrosoft-com header.b=x7ZxoCjy; dmarc=pass (policy=reject) header.from=oracle.com; spf=pass (imf07.hostedemail.com: domain of lorenzo.stoakes@oracle.com designates 205.220.165.32 as permitted sender) smtp.mailfrom=lorenzo.stoakes@oracle.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1737047803; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=Akln4iEOgTcBwfPmUIg+BHkiG0uX9AyJCEnYQgaAIXI=; b=MyURLgbPlwhI5LS5icyezJjOub5E2TBlatmmxWMdHxVkIAS2PuH5peL7nqF/FXEeOWhR+p VZ59w3vToE5hgXEVFtl00tQn4f3D5fzARF5rUAFNmGWrarBGYbFx5OyhrrUakpZK0Jpo2+ a+Ir/3Ui1XOIEG+83CL8LRwm8WXreyc= Received: from pps.filterd (m0246627.ppops.net [127.0.0.1]) by mx0b-00069f02.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 50GH0ist005198; Thu, 16 Jan 2025 17:16:19 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= corp-2023-11-20; bh=Akln4iEOgTcBwfPmUIg+BHkiG0uX9AyJCEnYQgaAIXI=; b= PSb0IP5WkwmcaaB0IJ37R7pwClrYTuzkhwIk6OtcRrwQNpn6IDDth8hUUCIIMlVL mnnM4pGoQskil0OjF6hRpyLPd3xKZ02jutQFwFPlH8vRSqlSuIPIVFucickdQa+U MXQ22v8KU+99kWg3QbKNWPkRbcyvc5zFEiV0IEmFsJSgeV65f/RYirU/RfXkZ369 ms3VoYrLtIvRG6wbg0jHjhIUuiyqwK5ffoOMQgxp0yxBwxYNCWEwf+c7D6NdInz4 aLDt7KgpPVyVF73O1jQ5l8tNP1gKGBr+WSTlvPJKayMOws7DjN0PPZLnQAYmZKuJ Qc+RF4eu07iX1fPriWt6HA== Received: from phxpaimrmta03.imrmtpd1.prodappphxaev1.oraclevcn.com (phxpaimrmta03.appoci.oracle.com [138.1.37.129]) by mx0b-00069f02.pphosted.com (PPS) with ESMTPS id 443f7yaqmn-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 16 Jan 2025 17:16:18 +0000 (GMT) Received: from pps.filterd (phxpaimrmta03.imrmtpd1.prodappphxaev1.oraclevcn.com [127.0.0.1]) by phxpaimrmta03.imrmtpd1.prodappphxaev1.oraclevcn.com (8.18.1.2/8.18.1.2) with ESMTP id 50GH4IJC035036; Thu, 16 Jan 2025 17:16:18 GMT Received: from nam12-dm6-obe.outbound.protection.outlook.com (mail-dm6nam12lp2173.outbound.protection.outlook.com [104.47.59.173]) by phxpaimrmta03.imrmtpd1.prodappphxaev1.oraclevcn.com (PPS) with ESMTPS id 443f3b2mey-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 16 Jan 2025 17:16:18 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=OB/mxZpJIQJO6N2qWP+e+RJTr6dRkO39bj2TfWD00LUiT8zxMU6nQ2otQXGizyeUS6bP92q2kJBK8z/lZJlKjZiAIsMHeDLE8qLBFwygKn+q+GngblwfJPPBNbQq7bDFVAzKpPqKhCxhqEVPXyWxcWwjLZux5RUcVhC7kKC7P+WBn8/IGEJmQlYreKz9Tct3tT1D6eE853p+uVby9Sy0bjcjQiXSowkjQCPN3Xg+tUdxkcCcxlIB721bBI+O+FnZw18oE+U1VqVKdAJtYilJxPFOk1vc6izbnYG9AX/Id6mgg0JtSp6SDx+QsJqeVudqBMahIrIoeXBCNeTqLCwnJg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Akln4iEOgTcBwfPmUIg+BHkiG0uX9AyJCEnYQgaAIXI=; b=A+01RXbgQJiNPGVxdH6dyIPhrud6fqhdJW+PrEM1uMFWs163pxQXpnaReEzLVgDn06iR/CqWWtVKYQiujffVcRl/q3jERWlP0BRxgeJlPen4zAMnEMuETQ1PRGS5VQX59mQmG2rdm+AZ/kYF1cvmJdcBLGtNZ1OPr+RHUGyT92tRn+kmS/ahNnQFSgiHYi3dTaribsuvXkOJPR6fdzLcMc9u1kpsWnoSuWoPJrF4xpfsPnoDObap2hcBQqo990vNiDf0aLLu/urAN+P+wbp45jmBL8wchR93sVqvLN1b7JSGj6wWybtRUxRvvZosVd0VgnhIJtjHD1q9jpyRm1SrjA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oracle.com; dmarc=pass action=none header.from=oracle.com; dkim=pass header.d=oracle.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.onmicrosoft.com; s=selector2-oracle-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Akln4iEOgTcBwfPmUIg+BHkiG0uX9AyJCEnYQgaAIXI=; b=x7ZxoCjyjWY5T7a3CJVKypTvY7cyX35WQwMQ/SZkC4yieVGdSXjD4m156IuRBxDooduaIFdv6LuzRXHYW4NsXK2pd+GyS2RlBaQpXgJwW/xEiHY8PTcUrepuQ28441r9e3u8JS9FGkQ6E4KhgtW7/2ESWUNvDhrFnMYAP+R7prY= Received: from BYAPR10MB3366.namprd10.prod.outlook.com (2603:10b6:a03:14f::25) by SJ0PR10MB4544.namprd10.prod.outlook.com (2603:10b6:a03:2ad::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8356.16; Thu, 16 Jan 2025 17:16:15 +0000 Received: from BYAPR10MB3366.namprd10.prod.outlook.com ([fe80::baf2:dff1:d471:1c9]) by BYAPR10MB3366.namprd10.prod.outlook.com ([fe80::baf2:dff1:d471:1c9%4]) with mapi id 15.20.8356.010; Thu, 16 Jan 2025 17:16:15 +0000 Date: Thu, 16 Jan 2025 17:16:12 +0000 From: Lorenzo Stoakes To: Benjamin Berg Cc: Jeff Xu , Kees Cook , akpm@linux-foundation.org, jannh@google.com, torvalds@linux-foundation.org, adhemerval.zanella@linaro.org, oleg@redhat.com, linux-kernel@vger.kernel.org, linux-hardening@vger.kernel.org, linux-mm@kvack.org, jorgelo@chromium.org, sroettger@google.com, ojeda@kernel.org, adobriyan@gmail.com, anna-maria@linutronix.de, mark.rutland@arm.com, linus.walleij@linaro.org, Jason@zx2c4.com, deller@gmx.de, rdunlap@infradead.org, davem@davemloft.net, hch@lst.de, peterx@redhat.com, hca@linux.ibm.com, f.fainelli@gmail.com, gerg@kernel.org, dave.hansen@linux.intel.com, mingo@kernel.org, ardb@kernel.org, Liam.Howlett@oracle.com, mhocko@suse.com, 42.hyeyoo@gmail.com, peterz@infradead.org, ardb@google.com, enh@google.com, rientjes@google.com, groeck@chromium.org, mpe@ellerman.id.au, Vlastimil Babka , Andrei Vagin , Dmitry Safonov <0x7f454c46@gmail.com>, Mike Rapoport , Alexander Mikhalitsyn Subject: Re: [PATCH v4 1/1] exec: seal system mappings Message-ID: <37b57df4-4687-4ed3-88b1-578bf5471751@lucifer.local> References: <20241125202021.3684919-2-jeffxu@google.com> <202412171248.409B10D@keescook> <202501061647.6C8F34CB1A@keescook> <5cf1601b-70c3-45bb-81ef-416d89c415c2@lucifer.local> <7071878c-7857-4acd-ac27-f049cbc84de2@lucifer.local> <2e5de601da34342d8eb0d8319dcf81ff213c7ef0.camel@sipsolutions.net> Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <2e5de601da34342d8eb0d8319dcf81ff213c7ef0.camel@sipsolutions.net> X-ClientProxiedBy: LO4P123CA0678.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:351::18) To BYAPR10MB3366.namprd10.prod.outlook.com (2603:10b6:a03:14f::25) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BYAPR10MB3366:EE_|SJ0PR10MB4544:EE_ X-MS-Office365-Filtering-Correlation-Id: 183c9f35-3580-4025-43b5-08dd36517b7b X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|1800799024|7416014|376014; X-Microsoft-Antispam-Message-Info: =?utf-8?B?Vm9lYW12QXdsSE93TDk2SDZqYm1KLzZ0ZEhmblorN3FsOGNxMUI1SUs4TC8z?= =?utf-8?B?M00vK2UzbXlqdFZadzIwT0JmRDBxemkyTDJSR2JGVVJ5OG84Mkpxa3JMZitp?= =?utf-8?B?ZlFwZWU4WmJmQmVzditDMVYvMXI2RnhXNHc1ZWFJSjlEVkNBbFRuaENLdkFx?= =?utf-8?B?K01LenFuZll5bW1FbU5VZEU3Z0VEd0lSWjVZeEswMkhneFFnK2tKZURraW5z?= =?utf-8?B?SlZwWlFONnVKNGd0MnVIdGN6V3pCYklFUVE3dXNsNXNQZWxBb3A5UFRwUUxR?= =?utf-8?B?dm5UVEVOSDlaMHhLZXB4Mm9FNmthbnQwQ24zUWFqaFFJM3dJaTF4K2RFaGZH?= =?utf-8?B?T2hkTGRvWERDaW5kak9VeU9vcHlMa2JrbVJQZXJPWGl3WHVkazk4S0xmbVhM?= =?utf-8?B?WkowYmNsdXZKMjNObkZoVml1V0p6QUlZYVR0U2dLSXYrOHphSXpQQzJPVU9D?= =?utf-8?B?Q1FyRDU5ZHlJZ1o2N2tTZnljVHZJWUxoRk9oUHBEU29zTW9rMFM1WEFENEdF?= =?utf-8?B?SW1ab0tCUUh5ZnQyUHJiRDNDQXc0L0pSejJLUE5ZVkxKSEM5OXY0NDFmQ3dD?= =?utf-8?B?NDNGQ1ArQ1NWc3JUSlE1ME5hb3Faa1hQand3bVIxaVlvU3hNZE5GNFAvdVpo?= =?utf-8?B?bVBBZHlFOXg2Rzg5bVcrTE9GekFlQ1V3KzFFSFdmQi9HRERuQlZVTGFJZmNo?= =?utf-8?B?akRscE12NDlOaWZ6VmE0ZVF2eEJFUFN2QXpqWXZKcUJTeGlNWVVuVmpuUmY2?= =?utf-8?B?aGN1VjBJWmIwY0loUWlnaGh5VklnRWhQSlFnc05LVW5DbmJQSG1KN3Z4WGVl?= =?utf-8?B?L3NucjRyS0pic3Z3QUdZbm1CU011YzJhRW1CcFZvOWJkeVlsWmJDUWVzcVVr?= =?utf-8?B?a1FvKy9pMG03VC9WRExYTDVCY2hpOUI1aVJFR2wvanRzZDBMTzFtaWdOQXRB?= =?utf-8?B?ZTl6QUtRcDZTaCtrc0thc2tNWTFpZW9HaGxucWpqdTdDUW93T3NmYy83RmFX?= =?utf-8?B?UmM0Unl4ZDNzSDMrNjAxZDM2NEJaTTg1bFdPbXRzWmJqTGJVTEFvZ1lqRXFW?= =?utf-8?B?U1V1aWNaZWppNVBNaHJJL0lkQ212YU82SldJaVIyK3Q1eG4rSytUNWEreER1?= =?utf-8?B?bDJqRUlVSFI0RUxQWEZSSmVxS1o0VDhIRHhoK3puWGY3MVpmNzdjZFgxd2dm?= =?utf-8?B?R04zYW5rcEdHaWZtR2gyajZrV2lkQ1czT3dTdGtCeGVMcTFCeDJpeGEwem1x?= =?utf-8?B?cVg1eUcrVUxaL20rRGRSbkZ6RnJEZ3Q2T3liOFVlS1ZOazhPUEhPNDZuMHhk?= =?utf-8?B?VnZmdzBrMkQwbSt0RVhSVU1zalVaTVBmeU5lR2QxZy9ONTJmNUs5L3NyV1RW?= =?utf-8?B?b3pMM0FhTytlOTRjN01JTFNuRUdmTkdSZ3o1VGFPbC9sK2h2OUptYWJSSXJP?= =?utf-8?B?dk9aS3VtNm9TYWlUcDlZSDBaeW45WXpGOVNYZE9HVWd6aGVONmVSTDlyYWh6?= =?utf-8?B?OUxJVnVOWnNaNXc1UnpzVDgxQWo3MjhOK0w3eUZUcDJFR2RTNEg0cXR3R0JC?= =?utf-8?B?VTl1UUFaSFA2d0hPdlN0d2ZVTWZtSVAxdEwxVXdYNUw4elRRL25VZldjd1Ra?= =?utf-8?B?YlpQc21aZlBIQmdhSXVZWFFBZjUrYUg1QXYrcG1nd0lRSktaZTNZRGEySGdl?= =?utf-8?B?YU4yQ1dEYkxvNnJIRlU4YnBhVnl5N3lJdjNHTTlJb3NJYlZ5VzRmMElRZFJW?= =?utf-8?B?azRMM3ViNnR0eUFXUFhLZEdJR0Z5R2xkM0kwSG05eDBBdElpZy9Ja01vaVNG?= =?utf-8?B?ckl4UjB6ZUQ2K1hQTVNnbm52TzdkNWt2QkNDUmQxRTg5d2wybGk4bXJVTlAw?= =?utf-8?Q?5vTXbV3KmVPjz?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BYAPR10MB3366.namprd10.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(7416014)(376014);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?OGw2UVpPSXVheG5NQVRFc1hsY2lvR0lqeTNBS0NJVHo1dDNuNkp3RTFLWGs3?= =?utf-8?B?eHN4RGhhUm1RZXRnMG5MQ1NyQlIrNFJPaFcrd0VpMnMwWTZRcEFDYVdoWUVE?= =?utf-8?B?N1hFclRkTlEzOEkya2hiQmpjeGtYQjlMdUFONTB6NUlnSDBFalp3TGk5L1RS?= =?utf-8?B?cnk0RGNnZDc4U1FsendhbDF2ajBkYnRFQmJwcGR1VUI1eXRMbkRpQ29xd1Y1?= =?utf-8?B?T1ZuZmEvZ2phTDZaaXpiNmtYZnFhQ1JZZFFHY1hmMGZiaGpNOUNOTDFEcVNs?= =?utf-8?B?RlZzUFZYcU16amp2Z0V6d2libVcrNW1PMlZrSzRBNXVHS2FHdjdSeWZ1UGdy?= =?utf-8?B?MjdZNnYrTU9DUVREa3M4OU5XSEFEQUltcnczT3puK0FFQjBJdkVvWU0vSGRZ?= =?utf-8?B?b0RVVWtDVXRXY1A2K0FOM1M2bE0vdG1CMmZjNlNlVVRMWkFUYVNlS1Nld3Vz?= =?utf-8?B?UWZNdWpOb1E0QjU5eTdZRXg5djN0ZHFpK0lkaXAwR1ZoaWdJY1V1aVNROHdZ?= =?utf-8?B?K3h3SzJ5aXNZeDcvaTYyQmdhOEdqelo2M1pnVGVZU1JZTzQzNDhyWDBveHhM?= =?utf-8?B?Y3NSakVVUVgvemZYTXo3RCtPcUhON3RDT2lEc3RLRUFhVkJlSVlieElIZm11?= =?utf-8?B?ZXJFM2p1MWJjQXJnZC9CSk9lTVF6ditzTXpLZEQwWnVtS1RITHhNQmcvWUhK?= =?utf-8?B?RVdhVXZRaGxwcU1RR1d4dHFCUHlOcVVOM3MrWWRZVzIyZCtMUVIyZC9LVnVq?= =?utf-8?B?Q2VseXlKUFI5MDBTdkZuUlBXc3ZRakgrTmtzQ3B2TmZISVBnQTNDOWZJUzdt?= =?utf-8?B?MVhTV29mNHZmQWFENkFES05WaE95MWRJWkphNjR0alZCekIvcU5XVzFtQnl3?= =?utf-8?B?Z1R3dXJ6TXhESXpTU0VTTERicWhEaVBiNndOWVBFd0RxL1NOQjBjakhYdmpS?= =?utf-8?B?LzNNUUtMWWs1cVZITlhFL3Z3WmVPS3I0ZnBaU24zTUR6Y0ZZNmVVMFpUdjRx?= =?utf-8?B?b2FPU3pIQzFvTXEzZjRRQkpRVEZpM0JaNXhuWnJHYU55dGlHZ1l6ckw5eUtr?= =?utf-8?B?ZjFQVXN4bDRwamQvdU9yWjBQbjNDajNvSGFGTzBVQ1pQb3UrV2JZd0JyUmhp?= =?utf-8?B?ZUNnL1J4WStKclBWclFpZitBOXNzOWNOLzNqOHdlbTF3cnlsZzZCRWlwU2ll?= =?utf-8?B?UXI4bVY5NzlRbmd4NHpIZmFiRlhXb1RTM1RFWUVPSUp0YVdKL3Q5VG5FL2U5?= =?utf-8?B?ODVPMFpvSmFpUlF5Wm12VUVSRUp0bkdzMmwyOElhRWRCVC9EelBBOG9ieW5J?= =?utf-8?B?bVpxWElyQkR6TEFrU2dPVHJpQ0wrMGFvaG5SdEs0emNHREMyOE1IeGNzQ0w4?= =?utf-8?B?TGdaNndkUitseXJZOUFTdFAyZTRvVXpacjNUUGY5dC9nVXFoSU5kR2RTUUc5?= =?utf-8?B?ZnRZNzhnTTFPWDYwNXJUMnhXZjVNRzdjMWxxaExCRGZZbUhNU1VsOTFKQVdL?= =?utf-8?B?N3hWSjdTQ1RPMnE3U01CN1JtTVRrMkl4NzNyc1lwdE5hSjBBNUZLRmR2Vkg1?= =?utf-8?B?RnZndU1ablp5N3NLNVVveWhvZ1h6akZKYWNWY3BKeG00RjBsL2Y1dy93NWR2?= =?utf-8?B?MXBDNVBvRS81aVBudGIvdnNjd0x6QXVncTBrK29zY09LMmxTOXBKZlVTSldv?= =?utf-8?B?cnQwM2QwTGo2b3hGcm91TVIyOHROQ0xYaFY0VndaSzN2eVVnR1ZyTzJQNm1n?= =?utf-8?B?b1llRThjYXY0NHV4cS9HbFFod29hSFpUb3NjaStLVnh3MHFUWXlTWDVrK3V3?= =?utf-8?B?R0V0UVRBbExhREIrRGFWekhOc3k0S1pFWnRROGhqcGJaUGw3dWdLTENORnRz?= =?utf-8?B?aTgySTd6YjJvOU5wWWxpT0NsWHpGakJaWGxiVnNad0QycnhlU1VJRWlnUGJh?= =?utf-8?B?ZTRGZ3FRc0loYTN0MksvaGRSeEVCbWR5b1lZeXhRRnJHU0ZVbTVSWDhXWFZ1?= =?utf-8?B?V2d6bjZLQmhCbitIazIwK0doVXNtMkZEZ3BhNXJhRUhsTmZzbVBCUEQ5alhy?= =?utf-8?B?Z2tJZkdLd1JtZkVYQTRtMytnVVc0TE15dnpIRE9sV3NwMlcraGd6Q2l1SmZx?= =?utf-8?B?MklyNEc1UWFFS0xLc3d3VW1VaVlSTHQvbGNFYm1udXlvVE9qdXNsdXlpK3Zl?= =?utf-8?B?amc9PQ==?= X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: uJnFoKlAhUvbkAxyrOHNAK/lHJmRhV5jqXHtmN6dD2GFkm8shQRb9+nndmKwRqU9sp68CixNmn8eZnhmGok0EjE+BmxTcils7CgCDfcDp4ZyYTO7m9/iis8/8t4p8y47otw30SmsS585QwaN7FwHiw8uRLDFPTefAYzeGhHJ9jYxlMNFX9n0/aPV2KIqwZOggMweUEVw5K9yXy8DGzJIbZ3RBOj0Bppjep2FRatb87+uYzw9LcArNmehrLI3BJzcrP6RGLUcVfRUs0dLDuDX67JkBGZCB7jz6Cmx3jat0BRRYH2svwGyQLQjkCIO0SkVEn3Azd9eNstXPj69vnE6fqfLBOhwng2OTkbqwo+8Ht6U6b1IYJms6VKPgFh922fZbqKO4XbdWfBvj+eW5Al5e8aoKX8sQOWPNr9yvonh0E7az1aLdXAIv4FDqWPCcOngkKlFCC7ecagxDSAT6C28DyoYxi/nz9K0OV/Yw780rw2h4yvgn1umiaJHYpoQguQnu+/JJn8X6FFwUC10TXcJSq8tSUJ/4fCiLUHmJFsq+Rb+taNc6y36ZuBxWEZ/xw1NZAaq+ir5mV1q5HDga8CW9d+x/JtvVxNHQX8DfhLhko0= X-OriginatorOrg: oracle.com X-MS-Exchange-CrossTenant-Network-Message-Id: 183c9f35-3580-4025-43b5-08dd36517b7b X-MS-Exchange-CrossTenant-AuthSource: BYAPR10MB3366.namprd10.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jan 2025 17:16:15.1302 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: o9sOvXcVRVujqoIk9D8a8mvX9CzU5Vk8ocsGd65hkYdCpKVctMMLrIVex1oJKxcShkG5XOGKjzdjOB2r5ujdeub1QTqAvcCmDlUcz0IVW9Q= X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR10MB4544 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1057,Hydra:6.0.680,FMLib:17.12.68.34 definitions=2025-01-16_07,2025-01-16_01,2024-11-22_01 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 bulkscore=0 adultscore=0 suspectscore=0 phishscore=0 malwarescore=0 mlxlogscore=999 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2411120000 definitions=main-2501160129 X-Proofpoint-ORIG-GUID: dEFPwDWOubWlOPk0P_XkwOsUT6egLum9 X-Proofpoint-GUID: dEFPwDWOubWlOPk0P_XkwOsUT6egLum9 X-Rspamd-Server: rspam04 X-Rspamd-Queue-Id: D30DB4000E X-Stat-Signature: k46ogoqi5jqyfbctt7srcq4btaxobcph X-Rspam-User: X-HE-Tag: 1737047802-80571 X-HE-Meta: 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 eplPZFpw wjeaROngB75uc6ncui2DSOyACneth1RCWwqNb8+lp65K3s2cL6kEkLUGIxbRMgMcDAfxyf106ZMcj+1FS63YRzl80iiyvEsAlKQj6zORr9WveaYEKIA+h1Q0y+dJaH1HSLpb9370iK836pyhHvGgF4jScFrMrjDH+D7hwEqrsn5cAoj2E/eStOtBmkA5He6WoFCu8QP2xIlQuUuy3hXd+NwePceX4OpLF7rKEkXGNanjSoyHwDM9tFwRbp+2wKMFvaEtUpbN6yJ9SOoZdHHq5q++aNFXuNYaVv1etJWKRVwle3qWHJep/I1K3SUVZuGqwzK6CEVaCnVKGgKMQkW8u+SgJ56I4EoNaz5fwJQAZlOpfD8GKRDfobooHZDGzVBWPlr4j1VIwCZs+MuS4mmAy9uQxtY7cajnbTz5MEiLsUiPjEUGUfBt5WrKTNQ3n7NDlqk7P5eWpNOdEIoKqNkpX4x98Fw76PEsgn9STIgc/qXYpSye9ljVMkJuG4bzVfhkv+yNWqsiMM+d8pXOIetvWkEnaISyKD7kWTP8+UfH33Lxul0nRMShg6ByXxkmUzn96Bhcnw8za26dEOg/nit9pYnjj/pWhq94AlCZZE+5qjW6tamWQhWJtik0bqVOCRPHCTR4VwVJXoRSvLktqpg4WF+pBucpk1vu3uU/8 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: On Thu, Jan 16, 2025 at 06:01:47PM +0100, Benjamin Berg wrote: > Hi Lorenzo, > > On Thu, 2025-01-16 at 15:48 +0000, Lorenzo Stoakes wrote: > > On Wed, Jan 15, 2025 at 12:20:59PM -0800, Jeff Xu wrote: > > > On Wed, Jan 15, 2025 at 11:46 AM Lorenzo Stoakes > > > wrote: > > > > [SNIP] > > > > > > > I've made it abundantly clear that this (NACKed) series cannot allow the > > > > kernel to be in a broken state even if a user sets flags to do so. > > > > > > > > This is because users might lack context to make this decision and > > > > incorrectly do so, and now we ship a known-broken kernel. > > > > > > > > You are now suggesting disabling the !CRIU requirement. Which violates my > > > > _requirements_ (not optional features). > > > > > > > Sure, I can add CRIU back. > > > > > > Are you fine with UML and gViso not working under this CONFIG ? > > > UML/gViso doesn't use any KCONFIG like CRIU does. > > > > Yeah this is a concern, wouldn't we be able to catch UML with a flag? > > > > Apologies my fault for maybe not being totally up to date with this, but what > > exactly was the gViso (is it gVisor actually?) > > UML is a separate architecture. It is a Linux kernel running as a > userspace application on top of an unmodified host kernel. > > So really, UML is a mostly weird userspace program for the purpose of > this discussion. And a pretty buggy one too--it got broken by rseq > already. > > What UML now does is: > * Execute a tiny static binary > * map special "stub" code/data pages at the topmost userspace address > (replacing its stack) > * continue execution inside the "stub" pages > * unmap everything below the "stub" pages > * use the unmap'ed area for userspace application mappings > > I believe that the "unmap everything" step will fail with this feature. > Ahhh interesting. > > Now, I am sure one can come up with solutions, e.g.: > 1. Simply print an explanation if the unmap() fails > 2. Find an address that is guaranteed to be below the VDSO and use a > smaller address space for the UML userspace. > 3. Somehow tell the host kernel to not install the VDSO mappings > 4. Add the host VDSO pages as a sealed VMA within UML to guard them > Right. > UML is a bit of a niche and I am not sure it is worth worrying about it > too much. > > Benjamin Well in that case then it's number_of_things_to_worry_about--; here :) Cheers Benjamin! [snip]