From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andrew Cooper Subject: Re: [PATCH 3/7] x86/mm: Further restrict permissions on some virtual mappings Date: Wed, 3 May 2017 14:38:14 +0100 Message-ID: <6a3fddf8-03b8-0bf3-d866-1819644fe328@citrix.com> References: <1493748326-9582-1-git-send-email-andrew.cooper3@citrix.com> <1493748326-9582-4-git-send-email-andrew.cooper3@citrix.com> <5909B5A50200007800156294@prv-mh.provo.novell.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <5909B5A50200007800156294@prv-mh.provo.novell.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" To: Jan Beulich Cc: George Dunlap , Tim Deegan , Xen-devel List-Id: xen-devel@lists.xenproject.org T24gMDMvMDUvMTcgMDk6NDksIEphbiBCZXVsaWNoIHdyb3RlOgo+Pj4+IE9uIDAyLjA1LjE3IGF0 IDIwOjA1LCA8YW5kcmV3LmNvb3BlcjNAY2l0cml4LmNvbT4gd3JvdGU6Cj4+IEFzIG9yaWdpbmFs bHkgcmVwb3J0ZWQsIHRoZSBMaW5lYXIgUGFnZXRhYmxlIHNsb3QgbWFwcyA1MTJHQiBvZiByYW0g YXMgUldYLAo+PiB3aGVyZSB0aGUgZ3Vlc3QgaGFzIGZ1bGwgcmVhZCBhY2Nlc3MgYW5kIGEgbG90 IG9mIGRpcmVjdCBvciBpbmRpcmVjdCBjb250cm9sCj4+IG92ZXIgdGhlIHdyaXR0ZW4gY29udGVu dC4gIEl0IGlzbid0IGhhcmQgZm9yIGEgUFYgZ3Vlc3QgdG8gaGlkZSBzaGVsbGNvZGUKPj4gaGVy ZS4KPj4KPj4gVGhlcmVmb3JlLCBpbmNyZWFzZSBkZWZlbmNlIGluIGRlcHRoIGJ5IGF1ZGl0aW5n IG91ciBjdXJyZW50IHBhZ2V0YWJsZQo+PiBtYXBwaW5ncy4KPj4KPj4gICogVGhlIHJlZ3VsYXIg bGluZWFyLCBzaGFkb3cgbGluZWFyLCBhbmQgcGVyLWRvbWFpbiBzbG90cyBoYXZlIG5vIGJ1c2lu ZXNzCj4+ICAgIGJlaW5nIGV4ZWN1dGFibGUgKGJ1dCBuZWVkIHRvIGJlIHdyaXR0ZW4pLCBzbyBh cmUgdXBkYXRlZCB0byBiZSBOWC4KPj4gICogVGhlIFJlYWQgT25seSBtYXBwaW5ncyBvZiB0aGUg TTJQIChjb21wYXQgYW5kIHJlZ3VsYXIpIGRvbid0IG5lZWQgdG8gYmUKPj4gICAgd3JpdGVhYmxl IG9yIGV4ZWN1dGFibGUuCj4+ICAqIFRoZSBQViBHRFQgbWFwcGluZ3MgZG9uJ3QgbmVlZCB0byBi ZSBleGVjdXRhYmxlLgo+Pgo+PiBSZXBvcnRlZC1ieTogSmFubiBIb3JuIDxqYW5uaEBnb29nbGUu Y29tPgo+PiBTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRyZXcuY29vcGVyM0BjaXRy aXguY29tPgo+IFJldmlld2VkLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Cj4g d2l0aCB0d28gcmVtYXJrczoKPgo+PiAtLS0gYS94ZW4vYXJjaC94ODYvbW0uYwo+PiArKysgYi94 ZW4vYXJjaC94ODYvbW0uYwo+PiBAQCAtMzg0LDcgKzM4NCw3IEBAIHZvaWQgX19pbml0IGFyY2hf aW5pdF9tZW1vcnkodm9pZCkKPj4gICAgICAgICAgICAgICAgICAgICAgZm9yICggOyBpIDwgTDNf UEFHRVRBQkxFX0VOVFJJRVM7ICsraSApCj4+ICAgICAgICAgICAgICAgICAgICAgICAgICBsM3Rh YltpXSA9IGwzZV9lbXB0eSgpOwo+PiAgICAgICAgICAgICAgICAgICAgICBzcGxpdF9sNGUgPSBs NGVfZnJvbV9wZm4odmlydF90b19tZm4obDN0YWIpLAo+PiAtICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgX19QQUdFX0hZUEVSVklTT1IpOwo+PiArICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgX19QQUdFX0hZUEVSVklTT1JfUlcp Owo+IFdvdWxkIGJlIG5pY2UgaWYgdGhpcyBjaGFuZ2UgKGFmZmVjdGluZyB0aGUgZGlyZWN0IG1h cCkgd2FzIGFsc28KPiBtZW50aW9uZWQgaW4gdGhlIGNvbW1pdCBtZXNzYWdlLCBldmVuIGlmIGl0 J3Mgb25seSBkZWJ1Z2dpbmcKPiBjb2RlLgo+Cj4+IEBAIC01MTUsNyArNTE1LDcgQEAgdm9pZCBf X2luaXQgcGFnaW5nX2luaXQodm9pZCkKPj4gICAgICAgICAgICAgIGwzX3JvX21wdCA9IHBhZ2Vf dG9fdmlydChsM19wZyk7Cj4+ICAgICAgICAgICAgICBjbGVhcl9wYWdlKGwzX3JvX21wdCk7Cj4+ ICAgICAgICAgICAgICBsNGVfd3JpdGUoJmlkbGVfcGdfdGFibGVbbDRfdGFibGVfb2Zmc2V0KHZh KV0sCj4+IC0gICAgICAgICAgICAgICAgICAgICAgbDRlX2Zyb21fcGFnZShsM19wZywgX19QQUdF X0hZUEVSVklTT1IpKTsKPj4gKyAgICAgICAgICAgICAgICAgICAgICBsNGVfZnJvbV9wYWdlKGwz X3BnLCBfX1BBR0VfSFlQRVJWSVNPUl9SVykpOwo+IFNpbWlsYXJseSBoZXJlIChhZ2FpbiBhZmZl Y3RpbmcgdGhlIGRpcmVjdCBtYXApLgoKVXBkYXRlZC4gIFRoZSB0ZXh0IG5vdyByZWFkcwoKICog VGhlIFBWIEdEVCBtYXBwaW5ncyBhbmQgYml0cyBvZiB0aGUgZGlyZWN0bWFwIGRvbid0IG5lZWQg dG8gYmUKZXhlY3V0YWJsZS4KCk15IG1ldGhvZCBvZiB3b3JraW5nIG91dCB3aGljaCBhcmVhcyB0 byBjaGFuZ2Ugd2VyZSB0byBjb25zaWRlciBhbGwgdXNlcwpvZiBfX1BBR0VfSFlQRVJWSVNPUi4g IEkgaGF2ZSBoYWxmIGEgbWluZCB0byBzdWJtaXQgYSBjaGFuZ2UgcmVuYW1pbmcgaXQKdG8gX19Q QUdFX1BHVEFCTEUsIGFzIGl0IHNob3VsZCBvbmx5IHJlYWxseSBiZSB1c2VkIHRvIGJ1aWxkCmlu dGVybWVkaWF0ZSBwYWdldGFibGUgZW50cmllcyB3aGVyZSB3ZSBjb250cm9sIFgvTlgsIFIvVyBv ciBTL1UgYXQgYQptb3JlIGZpbmUgZ3JhaW5lZCBsZXZlbC4KCn5BbmRyZXcKCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClhlbi1kZXZlbCBtYWlsaW5nIGxp c3QKWGVuLWRldmVsQGxpc3RzLnhlbi5vcmcKaHR0cHM6Ly9saXN0cy54ZW4ub3JnL3hlbi1kZXZl bAo=