All of lore.kernel.org
 help / color / mirror / Atom feed
From: Marc Zyngier <maz@kernel.org>
To: David Brazdil <dbrazdil@google.com>
Cc: kvmarm@lists.cs.columbia.edu,
	linux-arm-kernel@lists.infradead.org,
	linux-kernel@vger.kernel.org, James Morse <james.morse@arm.com>,
	Julien Thierry <julien.thierry.kdev@gmail.com>,
	Suzuki K Poulose <suzuki.poulose@arm.com>,
	Catalin Marinas <catalin.marinas@arm.com>,
	Will Deacon <will@kernel.org>, Dennis Zhou <dennis@kernel.org>,
	Tejun Heo <tj@kernel.org>, Christoph Lameter <cl@linux.com>,
	Mark Rutland <mark.rutland@arm.com>,
	Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>,
	Quentin Perret <qperret@google.com>,
	Andrew Scull <ascull@google.com>,
	Andrew Walbran <qwandor@google.com>,
	kernel-team@android.com
Subject: Re: [PATCH v1 07/24] kvm: arm64: Create nVHE copy of cpu_logical_map
Date: Wed, 11 Nov 2020 13:52:06 +0000	[thread overview]
Message-ID: <3ed604d7837fa64ec7c4fe5920c57382@kernel.org> (raw)
In-Reply-To: <20201111134527.ygzf5cm6qpdpcroo@google.com>

On 2020-11-11 13:45, David Brazdil wrote:
> On Wed, Nov 11, 2020 at 01:29:29PM +0000, Marc Zyngier wrote:
>> On 2020-11-11 13:03, David Brazdil wrote:
>> > > > +/*
>> > > > + * nVHE copy of data structures tracking available CPU cores.
>> > > > + * Only entries for CPUs that were online at KVM init are populated.
>> > > > + * Other CPUs should not be allowed to boot because their features were
>> > > > + * not checked against the finalized system capabilities.
>> > > > + */
>> > > > +u64 __ro_after_init __cpu_logical_map[NR_CPUS] = { [0 ... NR_CPUS-1]
>> > > > = INVALID_HWID };
>> > >
>> > > I'm not sure what __ro_after_init means once we get S2 isolation.
>> >
>> > It is stretching the definition of 'init' a bit, I know, but I don't see
>> > what
>> > your worry is about S2? The intention is to mark this read-only for
>> > .hyp.text
>> > at runtime. With S2, the host won't be able to write to it after KVM
>> > init.
>> > Obviously that's currently not the case.
>> 
>> More importantly, EL2 can write to it at any time, which is the bit 
>> I'm
>> worried
>> about, as it makes the annotation misleading.
> 
> EL2 can't, at least not accidentally. The hyp memory mapping is 
> PAGE_HYP_RO
> (see patch 05).

Ah, I obviously overlooked that. Thanks for setting me straight.

> Shouldn't clash with include files. Where fixing the kernel might clash 
> is
> all the users of for_each_*_cpu that use an int for the iterator var.

I don't think that's a problem (nobody expects that many CPUs). But if 
you
are confident that we don't have a problem, no need to change the kernel
itself.

         M.
-- 
Jazz is not dead. It just smells funny...

WARNING: multiple messages have this Message-ID (diff)
From: Marc Zyngier <maz@kernel.org>
To: David Brazdil <dbrazdil@google.com>
Cc: kernel-team@android.com,
	Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>,
	Andrew Walbran <qwandor@google.com>,
	Catalin Marinas <catalin.marinas@arm.com>,
	linux-kernel@vger.kernel.org,
	linux-arm-kernel@lists.infradead.org, Tejun Heo <tj@kernel.org>,
	Dennis Zhou <dennis@kernel.org>, Christoph Lameter <cl@linux.com>,
	Will Deacon <will@kernel.org>,
	kvmarm@lists.cs.columbia.edu
Subject: Re: [PATCH v1 07/24] kvm: arm64: Create nVHE copy of cpu_logical_map
Date: Wed, 11 Nov 2020 13:52:06 +0000	[thread overview]
Message-ID: <3ed604d7837fa64ec7c4fe5920c57382@kernel.org> (raw)
In-Reply-To: <20201111134527.ygzf5cm6qpdpcroo@google.com>

On 2020-11-11 13:45, David Brazdil wrote:
> On Wed, Nov 11, 2020 at 01:29:29PM +0000, Marc Zyngier wrote:
>> On 2020-11-11 13:03, David Brazdil wrote:
>> > > > +/*
>> > > > + * nVHE copy of data structures tracking available CPU cores.
>> > > > + * Only entries for CPUs that were online at KVM init are populated.
>> > > > + * Other CPUs should not be allowed to boot because their features were
>> > > > + * not checked against the finalized system capabilities.
>> > > > + */
>> > > > +u64 __ro_after_init __cpu_logical_map[NR_CPUS] = { [0 ... NR_CPUS-1]
>> > > > = INVALID_HWID };
>> > >
>> > > I'm not sure what __ro_after_init means once we get S2 isolation.
>> >
>> > It is stretching the definition of 'init' a bit, I know, but I don't see
>> > what
>> > your worry is about S2? The intention is to mark this read-only for
>> > .hyp.text
>> > at runtime. With S2, the host won't be able to write to it after KVM
>> > init.
>> > Obviously that's currently not the case.
>> 
>> More importantly, EL2 can write to it at any time, which is the bit 
>> I'm
>> worried
>> about, as it makes the annotation misleading.
> 
> EL2 can't, at least not accidentally. The hyp memory mapping is 
> PAGE_HYP_RO
> (see patch 05).

Ah, I obviously overlooked that. Thanks for setting me straight.

> Shouldn't clash with include files. Where fixing the kernel might clash 
> is
> all the users of for_each_*_cpu that use an int for the iterator var.

I don't think that's a problem (nobody expects that many CPUs). But if 
you
are confident that we don't have a problem, no need to change the kernel
itself.

         M.
-- 
Jazz is not dead. It just smells funny...
_______________________________________________
kvmarm mailing list
kvmarm@lists.cs.columbia.edu
https://lists.cs.columbia.edu/mailman/listinfo/kvmarm

WARNING: multiple messages have this Message-ID (diff)
From: Marc Zyngier <maz@kernel.org>
To: David Brazdil <dbrazdil@google.com>
Cc: Mark Rutland <mark.rutland@arm.com>,
	kernel-team@android.com,
	Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>,
	Andrew Walbran <qwandor@google.com>,
	Suzuki K Poulose <suzuki.poulose@arm.com>,
	Catalin Marinas <catalin.marinas@arm.com>,
	Quentin Perret <qperret@google.com>,
	linux-kernel@vger.kernel.org, James Morse <james.morse@arm.com>,
	linux-arm-kernel@lists.infradead.org, Tejun Heo <tj@kernel.org>,
	Dennis Zhou <dennis@kernel.org>, Christoph Lameter <cl@linux.com>,
	Will Deacon <will@kernel.org>,
	kvmarm@lists.cs.columbia.edu,
	Julien Thierry <julien.thierry.kdev@gmail.com>,
	Andrew Scull <ascull@google.com>
Subject: Re: [PATCH v1 07/24] kvm: arm64: Create nVHE copy of cpu_logical_map
Date: Wed, 11 Nov 2020 13:52:06 +0000	[thread overview]
Message-ID: <3ed604d7837fa64ec7c4fe5920c57382@kernel.org> (raw)
In-Reply-To: <20201111134527.ygzf5cm6qpdpcroo@google.com>

On 2020-11-11 13:45, David Brazdil wrote:
> On Wed, Nov 11, 2020 at 01:29:29PM +0000, Marc Zyngier wrote:
>> On 2020-11-11 13:03, David Brazdil wrote:
>> > > > +/*
>> > > > + * nVHE copy of data structures tracking available CPU cores.
>> > > > + * Only entries for CPUs that were online at KVM init are populated.
>> > > > + * Other CPUs should not be allowed to boot because their features were
>> > > > + * not checked against the finalized system capabilities.
>> > > > + */
>> > > > +u64 __ro_after_init __cpu_logical_map[NR_CPUS] = { [0 ... NR_CPUS-1]
>> > > > = INVALID_HWID };
>> > >
>> > > I'm not sure what __ro_after_init means once we get S2 isolation.
>> >
>> > It is stretching the definition of 'init' a bit, I know, but I don't see
>> > what
>> > your worry is about S2? The intention is to mark this read-only for
>> > .hyp.text
>> > at runtime. With S2, the host won't be able to write to it after KVM
>> > init.
>> > Obviously that's currently not the case.
>> 
>> More importantly, EL2 can write to it at any time, which is the bit 
>> I'm
>> worried
>> about, as it makes the annotation misleading.
> 
> EL2 can't, at least not accidentally. The hyp memory mapping is 
> PAGE_HYP_RO
> (see patch 05).

Ah, I obviously overlooked that. Thanks for setting me straight.

> Shouldn't clash with include files. Where fixing the kernel might clash 
> is
> all the users of for_each_*_cpu that use an int for the iterator var.

I don't think that's a problem (nobody expects that many CPUs). But if 
you
are confident that we don't have a problem, no need to change the kernel
itself.

         M.
-- 
Jazz is not dead. It just smells funny...

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel

  reply	other threads:[~2020-11-11 13:52 UTC|newest]

Thread overview: 166+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-11-09 11:32 [PATCH v1 00/24] Opt-in always-on nVHE hypervisor David Brazdil
2020-11-09 11:32 ` David Brazdil
2020-11-09 11:32 ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 01/24] psci: Accessor for configured PSCI version David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-10 14:43   ` Marc Zyngier
2020-11-10 14:43     ` Marc Zyngier
2020-11-10 14:43     ` Marc Zyngier
2020-11-11 11:31     ` David Brazdil
2020-11-11 11:31       ` David Brazdil
2020-11-11 11:31       ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 02/24] psci: Accessor for configured PSCI function IDs David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 03/24] arm64: Move MAIR_EL1_SET to asm/memory.h David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-10 14:49   ` Marc Zyngier
2020-11-10 14:49     ` Marc Zyngier
2020-11-10 14:49     ` Marc Zyngier
2020-11-09 11:32 ` [PATCH v1 04/24] kvm: arm64: Initialize MAIR_EL2 using a constant David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 05/24] kvm: arm64: Add .hyp.data..ro_after_init ELF section David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 06/24] kvm: arm64: Support per_cpu_ptr in nVHE hyp code David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-10 15:08   ` Marc Zyngier
2020-11-10 15:08     ` Marc Zyngier
2020-11-10 15:08     ` Marc Zyngier
2020-11-11 12:32     ` David Brazdil
2020-11-11 12:32       ` David Brazdil
2020-11-11 12:32       ` David Brazdil
2020-11-11 12:46       ` Marc Zyngier
2020-11-11 12:46         ` Marc Zyngier
2020-11-11 12:46         ` Marc Zyngier
2020-11-09 11:32 ` [PATCH v1 07/24] kvm: arm64: Create nVHE copy of cpu_logical_map David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-10 15:24   ` Marc Zyngier
2020-11-10 15:24     ` Marc Zyngier
2020-11-10 15:24     ` Marc Zyngier
2020-11-11 13:03     ` David Brazdil
2020-11-11 13:03       ` David Brazdil
2020-11-11 13:03       ` David Brazdil
2020-11-11 13:29       ` Marc Zyngier
2020-11-11 13:29         ` Marc Zyngier
2020-11-11 13:29         ` Marc Zyngier
2020-11-11 13:45         ` David Brazdil
2020-11-11 13:45           ` David Brazdil
2020-11-11 13:45           ` David Brazdil
2020-11-11 13:52           ` Marc Zyngier [this message]
2020-11-11 13:52             ` Marc Zyngier
2020-11-11 13:52             ` Marc Zyngier
2020-11-09 11:32 ` [PATCH v1 08/24] kvm: arm64: Move hyp-init params to a per-CPU struct David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-10 15:30   ` Marc Zyngier
2020-11-10 15:30     ` Marc Zyngier
2020-11-10 15:30     ` Marc Zyngier
2020-11-09 11:32 ` [PATCH v1 09/24] kvm: arm64: Refactor handle_trap to use a switch David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 10/24] kvm: arm64: Extract parts of el2_setup into a macro David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-10 15:56   ` Marc Zyngier
2020-11-10 15:56     ` Marc Zyngier
2020-11-10 15:56     ` Marc Zyngier
2020-11-16 17:56     ` David Brazdil
2020-11-16 17:56       ` David Brazdil
2020-11-16 17:56       ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 11/24] kvm: arm64: Add SMC handler in nVHE EL2 David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-11 12:12   ` Marc Zyngier
2020-11-11 12:12     ` Marc Zyngier
2020-11-11 12:12     ` Marc Zyngier
2020-11-09 11:32 ` [PATCH v1 12/24] kvm: arm64: Extract __do_hyp_init into a helper function David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 13/24] kvm: arm64: Add CPU entry point in nVHE hyp David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-11 11:57   ` Marc Zyngier
2020-11-11 11:57     ` Marc Zyngier
2020-11-11 11:57     ` Marc Zyngier
2020-11-16 11:49     ` David Brazdil
2020-11-16 11:49       ` David Brazdil
2020-11-16 11:49       ` David Brazdil
2020-11-16 12:40       ` Marc Zyngier
2020-11-16 12:40         ` Marc Zyngier
2020-11-16 12:40         ` Marc Zyngier
2020-11-09 11:32 ` [PATCH v1 14/24] kvm: arm64: Add function to enter host from KVM nVHE hyp code David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 15/24] kvm: arm64: Bootstrap PSCI SMC handler in nVHE EL2 David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-11 13:18   ` Marc Zyngier
2020-11-11 13:18     ` Marc Zyngier
2020-11-11 13:18     ` Marc Zyngier
2020-11-09 11:32 ` [PATCH v1 16/24] kvm: arm64: Add offset for hyp VA <-> PA conversion David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-11 13:47   ` Marc Zyngier
2020-11-11 13:47     ` Marc Zyngier
2020-11-11 13:47     ` Marc Zyngier
2020-11-09 11:32 ` [PATCH v1 17/24] kvm: arm64: Add __hyp_pa_symbol helper macro David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 16:59   ` Quentin Perret
2020-11-09 16:59     ` Quentin Perret
2020-11-09 16:59     ` Quentin Perret
2020-11-09 18:10     ` Marc Zyngier
2020-11-09 18:10       ` Marc Zyngier
2020-11-09 18:10       ` Marc Zyngier
2020-11-10  9:24       ` David Brazdil
2020-11-10  9:24         ` David Brazdil
2020-11-10  9:24         ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 18/24] kvm: arm64: Forward safe PSCI SMCs coming from host David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 19/24] kvm: arm64: Intercept host's PSCI_CPU_ON SMCs David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 20/24] kvm: arm64: Intercept host's CPU_SUSPEND PSCI SMCs David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 21/24] kvm: arm64: Add kvm-arm.protected early kernel parameter David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 22/24] kvm: arm64: Keep nVHE EL2 vector installed David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 23/24] kvm: arm64: Trap host SMCs in protected mode David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-10  5:02   ` kernel test robot
2020-11-10  5:02     ` kernel test robot
2020-11-10  5:02     ` kernel test robot
2020-11-10  5:02     ` kernel test robot
2020-11-10  9:03   ` Marc Zyngier
2020-11-10  9:03     ` Marc Zyngier
2020-11-10  9:03     ` Marc Zyngier
2020-11-10 13:00     ` David Brazdil
2020-11-10 13:00       ` David Brazdil
2020-11-10 13:00       ` David Brazdil
2020-11-09 11:32 ` [PATCH v1 24/24] kvm: arm64: Fix EL2 mode availability checks David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-09 11:32   ` David Brazdil
2020-11-10 10:15 ` [PATCH v1 00/24] Opt-in always-on nVHE hypervisor Christoph Hellwig
2020-11-10 10:15   ` Christoph Hellwig
2020-11-10 10:15   ` Christoph Hellwig
2020-11-10 11:18   ` Marc Zyngier
2020-11-10 11:18     ` Marc Zyngier
2020-11-10 11:18     ` Marc Zyngier
2021-01-19 13:17     ` Janne Karhunen
2021-01-19 13:17       ` Janne Karhunen
2021-01-19 13:17       ` Janne Karhunen
2020-11-11 14:32 ` Marc Zyngier
2020-11-11 14:32   ` Marc Zyngier
2020-11-11 14:32   ` Marc Zyngier

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3ed604d7837fa64ec7c4fe5920c57382@kernel.org \
    --to=maz@kernel.org \
    --cc=ascull@google.com \
    --cc=catalin.marinas@arm.com \
    --cc=cl@linux.com \
    --cc=dbrazdil@google.com \
    --cc=dennis@kernel.org \
    --cc=james.morse@arm.com \
    --cc=julien.thierry.kdev@gmail.com \
    --cc=kernel-team@android.com \
    --cc=kvmarm@lists.cs.columbia.edu \
    --cc=linux-arm-kernel@lists.infradead.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=lorenzo.pieralisi@arm.com \
    --cc=mark.rutland@arm.com \
    --cc=qperret@google.com \
    --cc=qwandor@google.com \
    --cc=suzuki.poulose@arm.com \
    --cc=tj@kernel.org \
    --cc=will@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.