From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754078AbdKAIBR (ORCPT ); Wed, 1 Nov 2017 04:01:17 -0400 Received: from mail.kernel.org ([198.145.29.99]:47788 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751306AbdKAIBP (ORCPT ); Wed, 1 Nov 2017 04:01:15 -0400 DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 2F83A21923 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=kernel.org Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=luto@kernel.org X-Google-Smtp-Source: ABhQp+S63oMQ6aCgTavmuWBA49ZNfOOTl7uXqN9qaNPQ3KiyFmsQoS9M14LpzuxiA90t1AnRiG15vStnG9RxZLf3T7k= MIME-Version: 1.0 In-Reply-To: <20171031223208.F271E813@viggo.jf.intel.com> References: <20171031223146.6B47C861@viggo.jf.intel.com> <20171031223208.F271E813@viggo.jf.intel.com> From: Andy Lutomirski Date: Wed, 1 Nov 2017 01:00:54 -0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH 12/23] x86, kaiser: map dynamically-allocated LDTs To: Dave Hansen Cc: "linux-kernel@vger.kernel.org" , "linux-mm@kvack.org" , moritz.lipp@iaik.tugraz.at, daniel.gruss@iaik.tugraz.at, michael.schwarz@iaik.tugraz.at, Andrew Lutomirski , Linus Torvalds , Kees Cook , Hugh Dickins , X86 ML Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Oct 31, 2017 at 3:32 PM, Dave Hansen wrote: > > Normally, a process just has a NULL mm->context.ldt. But, we > have a syscall for a process to set a new one. If a process does > that, we need to map the new LDT. > > The original KAISER patch missed this case. Tglx suggested that we instead increase the padding at the top of the user address space from 4k to 64k and put the LDT there. This is a slight ABI break, but I'd be rather surprised if anything noticed, especially because the randomized vdso currently regularly lands there (IIRC), so any user code that explicitly uses those 60k already collides with the vdso. I can make this happen.