All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Yu, Yu-cheng" <yu-cheng.yu@intel.com>
To: Borislav Petkov <bp@alien8.de>
Cc: x86@kernel.org, "H. Peter Anvin" <hpa@zytor.com>,
	Thomas Gleixner <tglx@linutronix.de>,
	Ingo Molnar <mingo@redhat.com>,
	linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org,
	linux-mm@kvack.org, linux-arch@vger.kernel.org,
	linux-api@vger.kernel.org, Arnd Bergmann <arnd@arndb.de>,
	Andy Lutomirski <luto@kernel.org>,
	Balbir Singh <bsingharora@gmail.com>,
	Cyrill Gorcunov <gorcunov@gmail.com>,
	Dave Hansen <dave.hansen@linux.intel.com>,
	Eugene Syromiatnikov <esyr@redhat.com>,
	Florian Weimer <fweimer@redhat.com>,
	"H.J. Lu" <hjl.tools@gmail.com>, Jann Horn <jannh@google.com>,
	Jonathan Corbet <corbet@lwn.net>,
	Kees Cook <keescook@chromium.org>,
	Mike Kravetz <mike.kravetz@oracle.com>,
	Nadav Amit <nadav.amit@gmail.com>,
	Oleg Nesterov <oleg@redhat.com>, Pavel Machek <pavel@ucw.cz>,
	Peter Zijlstra <peterz@infradead.org>,
	Randy Dunlap <rdunlap@infradead.org>,
	"Ravi V. Shankar" <ravi.v.shankar@intel.com>,
	Vedvyas Shanbhogue <vedvyas.shanbhogue@intel.com>,
	Dave Martin <Dave.Martin@arm.com>,
	Weijiang Yang <weijiang.yang@intel.com>,
	Pengfei Xu <pengfei.xu@intel.com>,
	Michael Kerrisk <mtk.manpages@gmail.com>
Subject: Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler
Date: Mon, 8 Feb 2021 12:11:32 -0800	[thread overview]
Message-ID: <f5a24814-4e94-3e40-db0a-463b469283d2@intel.com> (raw)
In-Reply-To: <20210208194854.GI18227@zn.tnic>

On 2/8/2021 11:48 AM, Borislav Petkov wrote:
> On Mon, Feb 08, 2021 at 11:23:18AM -0800, Yu, Yu-cheng wrote:
>> exc_general_protection() and do_trap() both call show_signal(), which
>> then calls printk_ratelimit().
> 
> You could've done some git archeology and could've found
> 
>    abd4f7505baf ("x86: i386-show-unhandled-signals-v3")
> 
> which explains why that ratelimiting is needed.
> 
>> For example, if a shell script, in a loop re-starts an app when it
>> exits, and the app is causing control-protection fault. The log
>> messages should be rate limited.
> 
> I think you should be able to get where I'm going with this, by now:
> please put a comment over the ratelimiting to explain why it is there,
> just like the above commit explains.

I will add that.

> 
> Thx.
> 


  reply	other threads:[~2021-02-08 21:23 UTC|newest]

Thread overview: 67+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-02-03 22:55 [PATCH v19 00/25] Control-flow Enforcement: Shadow Stack Yu-cheng Yu
2021-02-03 22:55 ` [PATCH v19 01/25] Documentation/x86: Add CET description Yu-cheng Yu
2021-02-04 19:52   ` Kees Cook
2021-02-04 20:03     ` Yu, Yu-cheng
2021-02-03 22:55 ` [PATCH v19 02/25] x86/cet/shstk: Add Kconfig option for user-mode control-flow protection Yu-cheng Yu
2021-02-04 19:56   ` Kees Cook
2021-02-05  0:05     ` Yu, Yu-cheng
2021-02-03 22:55 ` [PATCH v19 03/25] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) Yu-cheng Yu
2021-02-04 19:57   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 04/25] x86/cpufeatures: Introduce X86_FEATURE_CET and setup functions Yu-cheng Yu
2021-02-04 19:58   ` Kees Cook
2021-02-05 13:43   ` Borislav Petkov
2021-02-05 16:15     ` Yu, Yu-cheng
2021-02-03 22:55 ` [PATCH v19 05/25] x86/fpu/xstate: Introduce CET MSR and XSAVES supervisor states Yu-cheng Yu
2021-02-04 19:59   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 06/25] x86/cet: Add control-protection fault handler Yu-cheng Yu
2021-02-04 20:09   ` Kees Cook
2021-02-05  0:10     ` Yu, Yu-cheng
2021-02-05 13:59   ` Borislav Petkov
2021-02-05 18:00     ` Yu, Yu-cheng
2021-02-05 18:29       ` Kees Cook
2021-02-08 18:20       ` Borislav Petkov
2021-02-08 18:50         ` Yu, Yu-cheng
2021-02-08 18:53           ` Borislav Petkov
2021-02-08 19:23             ` Yu, Yu-cheng
2021-02-08 19:48               ` Borislav Petkov
2021-02-08 20:11                 ` Yu, Yu-cheng [this message]
2021-02-03 22:55 ` [PATCH v19 07/25] x86/mm: Remove _PAGE_DIRTY from kernel RO pages Yu-cheng Yu
2021-02-04 20:10   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 08/25] x86/mm: Introduce _PAGE_COW Yu-cheng Yu
2021-02-04 20:19   ` Kees Cook
2021-02-04 20:27     ` Dave Hansen
2021-02-05 18:41       ` Yu, Yu-cheng
2021-02-08 23:03         ` Yu, Yu-cheng
2021-02-05 18:58     ` Yu, Yu-cheng
2021-02-03 22:55 ` [PATCH v19 09/25] drm/i915/gvt: Change _PAGE_DIRTY to _PAGE_DIRTY_BITS Yu-cheng Yu
2021-02-03 22:55 ` [PATCH v19 10/25] x86/mm: Update pte_modify for _PAGE_COW Yu-cheng Yu
2021-02-04 20:20   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 11/25] x86/mm: Update ptep_set_wrprotect() and pmdp_set_wrprotect() for transition from _PAGE_DIRTY to _PAGE_COW Yu-cheng Yu
2021-02-04 20:21   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 12/25] mm: Introduce VM_SHSTK for shadow stack memory Yu-cheng Yu
2021-02-04 20:46   ` Cyrill Gorcunov
2021-02-04 21:48     ` Yu, Yu-cheng
2021-02-03 22:55 ` [PATCH v19 13/25] x86/mm: Shadow Stack page fault error checking Yu-cheng Yu
2021-02-03 22:55 ` [PATCH v19 14/25] x86/mm: Update maybe_mkwrite() for shadow stack Yu-cheng Yu
2021-02-04 20:22   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 15/25] mm: Fixup places that call pte_mkwrite() directly Yu-cheng Yu
2021-02-04 20:22   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 16/25] mm: Add guard pages around a shadow stack Yu-cheng Yu
2021-02-04 20:24   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 17/25] mm/mmap: Add shadow stack pages to memory accounting Yu-cheng Yu
2021-02-04 20:24   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 18/25] mm: Update can_follow_write_pte() for shadow stack Yu-cheng Yu
2021-02-04 20:27   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 19/25] mm: Re-introduce vm_flags to do_mmap() Yu-cheng Yu
2021-02-04 20:28   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 20/25] x86/cet/shstk: User-mode shadow stack support Yu-cheng Yu
2021-02-04 20:29   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 21/25] x86/cet/shstk: Handle signals for shadow stack Yu-cheng Yu
2021-02-03 22:55 ` [PATCH v19 22/25] ELF: Introduce arch_setup_elf_property() Yu-cheng Yu
2021-02-04 20:33   ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 23/25] x86/cet/shstk: Handle thread shadow stack Yu-cheng Yu
2021-02-03 22:55 ` [PATCH v19 24/25] x86/cet/shstk: Add arch_prctl functions for " Yu-cheng Yu
2021-02-04 20:35   ` Kees Cook
2021-02-04 23:41     ` Yu, Yu-cheng
2021-02-05 18:26       ` Kees Cook
2021-02-03 22:55 ` [PATCH v19 25/25] mm: Introduce PROT_SHSTK " Yu-cheng Yu

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=f5a24814-4e94-3e40-db0a-463b469283d2@intel.com \
    --to=yu-cheng.yu@intel.com \
    --cc=Dave.Martin@arm.com \
    --cc=arnd@arndb.de \
    --cc=bp@alien8.de \
    --cc=bsingharora@gmail.com \
    --cc=corbet@lwn.net \
    --cc=dave.hansen@linux.intel.com \
    --cc=esyr@redhat.com \
    --cc=fweimer@redhat.com \
    --cc=gorcunov@gmail.com \
    --cc=hjl.tools@gmail.com \
    --cc=hpa@zytor.com \
    --cc=jannh@google.com \
    --cc=keescook@chromium.org \
    --cc=linux-api@vger.kernel.org \
    --cc=linux-arch@vger.kernel.org \
    --cc=linux-doc@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-mm@kvack.org \
    --cc=luto@kernel.org \
    --cc=mike.kravetz@oracle.com \
    --cc=mingo@redhat.com \
    --cc=mtk.manpages@gmail.com \
    --cc=nadav.amit@gmail.com \
    --cc=oleg@redhat.com \
    --cc=pavel@ucw.cz \
    --cc=pengfei.xu@intel.com \
    --cc=peterz@infradead.org \
    --cc=ravi.v.shankar@intel.com \
    --cc=rdunlap@infradead.org \
    --cc=tglx@linutronix.de \
    --cc=vedvyas.shanbhogue@intel.com \
    --cc=weijiang.yang@intel.com \
    --cc=x86@kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.