Re: [PATCH 13/14] KVM: arm64: Restrict hyp stage-1 manipulation in protected mode

2021-07-21 Thread Quentin Perret
Hi Fuad, On Wednesday 21 Jul 2021 at 11:45:53 (+0100), Fuad Tabba wrote: > > +static int hyp_range_is_shared_walker(u64 addr, u64 end, u32 level, > > + kvm_pte_t *ptep, > > + enum kvm_pgtable_walk_flags flag, > > +

Re: [PATCH 13/14] KVM: arm64: Restrict hyp stage-1 manipulation in protected mode

2021-07-21 Thread Fuad Tabba
Hi Quentin, On Mon, Jul 19, 2021 at 11:48 AM Quentin Perret wrote: > > The host kernel is currently able to change EL2 stage-1 mappings without > restrictions thanks to the __pkvm_create_mappings() hypercall. But in a > world where the host is no longer part of the TCB, this clearly poses a >

[PATCH 13/14] KVM: arm64: Restrict hyp stage-1 manipulation in protected mode

2021-07-19 Thread Quentin Perret
The host kernel is currently able to change EL2 stage-1 mappings without restrictions thanks to the __pkvm_create_mappings() hypercall. But in a world where the host is no longer part of the TCB, this clearly poses a problem. To fix this, introduce a new hypercall to allow the host to share a