Re: bcm2711_thermal: Kernel panic - not syncing: Asynchronous SError Interrupt

2021-02-10 Thread Juerg Haefliger
On Wed, 10 Feb 2021 14:15:46 +0100 Nicolas Saenz Julienne wrote: > [ Add Robin, Catalin and Florian in case they want to chime in ] > > Hi Juerg, thanks for the report! > > On Wed, 2021-02-10 at 11:48 +0100, Juerg Haefliger wrote: > > Trying to dump the BCM2711 regis

bcm2711_thermal: Kernel panic - not syncing: Asynchronous SError Interrupt

2021-02-10 Thread Juerg Haefliger
Trying to dump the BCM2711 registers kills the kernel: # cat /sys/kernel/debug/regmap/dummy-avs-monitor\@fd5d2000/range 0-efc # cat /sys/kernel/debug/regmap/dummy-avs-monitor\@fd5d2000/registers [ 62.857661] SError Interrupt on CPU1, code 0xbf02 -- SError [ 62.857671] CPU: 1 PID: 478 Com

[PATCH] staging: bcm2835-audio: Replace unsafe strcpy() with strscpy()

2021-02-04 Thread Juerg Haefliger
] For the sake of it, replace all the other occurences of strcpy() under bcm2835-audio/ as well. Signed-off-by: Juerg Haefliger --- drivers/staging/vc04_services/bcm2835-audio/bcm2835-ctl.c | 6 +++--- drivers/staging/vc04_services/bcm2835-audio/bcm2835-pcm.c | 2 +- drivers/staging

Re: [ovs-dev] openvswitch crash on i386

2019-03-06 Thread Juerg Haefliger
On Tue, 5 Mar 2019 11:58:42 -0800 Joe Stringer wrote: > On Tue, Mar 5, 2019 at 2:12 AM Christian Ehrhardt > wrote: > > > > On Tue, Mar 5, 2019 at 10:58 AM Juerg Haefliger > > wrote: > > > > > > Hi, > > > > > > Running th

openvswitch crash on i386

2019-03-05 Thread Juerg Haefliger
Hi, Running the following commands in a loop will crash an i386 5.0 kernel typically within a few iterations: ovs-vsctl add-br test ovs-vsctl del-br test [ 106.215748] BUG: unable to handle kernel paging request at e8a35f3b [ 106.216733] #PF error: [normal kernel read fault] [ 106.217464] *pd

Re: [RESEND PATCH] selftests/ftrace: Handle the absence of tput

2019-02-25 Thread Juerg Haefliger
On Mon, 25 Feb 2019 07:51:13 -0700 shuah wrote: > On 2/25/19 6:14 AM, Juerg Haefliger wrote: > > In environments where tput is not available, we get the following > > error > > $ ./ftracetest: 163: [: Illegal number: > > because ncolors is an empty string. Fix tha

[RESEND PATCH] selftests/ftrace: Handle the absence of tput

2019-02-25 Thread Juerg Haefliger
In environments where tput is not available, we get the following error $ ./ftracetest: 163: [: Illegal number: because ncolors is an empty string. Fix that by setting it to 0 if the tput command fails. Acked-by: Steven Rostedt (VMware) Acked-by: Masami Hiramatsu Signed-off-by: Juerg Haefliger

Re: [RESEND PATCH v2 2/2] selftests/ftrace: Replace \e with \033

2019-02-23 Thread Juerg Haefliger
On Fri, 22 Feb 2019 15:46:03 -0700 shuah wrote: > On 2/22/19 1:53 PM, Juerg Haefliger wrote: > > The \e sequence character is not POSIX. Fix that by using \033 instead. > > > > Acked-by: Steven Rostedt (VMware) > > Acked-by: Masami Hiramatsu > &g

[RESEND PATCH v2 0/2] selftests/ftrace: Make ftracetest POSIX compliant

2019-02-22 Thread Juerg Haefliger
Add sh...@kernel.org and linux-kselft...@vger.kernel.org. The recent addition of colored output introduced some non-POSIX-compliant constructs. Fix that. Juerg Haefliger (2): selftests/ftrace: Replace echo -e with printf selftests/ftrace: Replace \e with \033 tools/testing/selftests/ftrace

[RESEND PATCH v2 2/2] selftests/ftrace: Replace \e with \033

2019-02-22 Thread Juerg Haefliger
The \e sequence character is not POSIX. Fix that by using \033 instead. Acked-by: Steven Rostedt (VMware) Acked-by: Masami Hiramatsu Signed-off-by: Juerg Haefliger --- tools/testing/selftests/ftrace/ftracetest | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/tools

[RESEND PATCH v2 1/2] selftests/ftrace: Replace echo -e with printf

2019-02-22 Thread Juerg Haefliger
echo -e is not POSIX. Depending on what /bin/sh is, we can get incorrect output like: $ -e -n [1] Basic trace file check $ -e[PASS] Fix that by using printf instead. Acked-by: Steven Rostedt (VMware) Acked-by: Masami Hiramatsu Signed-off-by: Juerg Haefliger --- tools/testing/selftests

[RESEND PATCH v2 1/2] selftests/ftrace: Replace echo -e with printf

2019-02-22 Thread Juerg Haefliger
echo -e is not POSIX. Depending on what /bin/sh is, we can get incorrect output like: $ -e -n [1] Basic trace file check $ -e[PASS] Fix that by using printf instead. Acked-by: Steven Rostedt (VMware) Acked-by: Masami Hiramatsu Signed-off-by: Juerg Haefliger --- tools/testing/selftests

[RESEND PATCH v2 0/2] selftests/ftrace: Make ftracetest POSIX compliant

2019-02-22 Thread Juerg Haefliger
Add sh...@kernel.org and linux-kselft...@vger.kernel.org. The recent addition of colored output introduced some non-POSIX-compliant constructs. Fix that. Juerg Haefliger (2): selftests/ftrace: Replace echo -e with printf selftests/ftrace: Replace \e with \033 tools/testing/selftests/ftrace

[RESEND PATCH v2 1/2] selftests/ftrace: Replace echo -e with printf

2019-02-22 Thread Juerg Haefliger
echo -e is not POSIX. Depending on what /bin/sh is, we can get incorrect output like: $ -e -n [1] Basic trace file check $ -e[PASS] Fix that by using printf instead. Acked-by: Steven Rostedt (VMware) Acked-by: Masami Hiramatsu Signed-off-by: Juerg Haefliger --- tools/testing/selftests

[RESEND PATCH v2 0/2] selftests/ftrace: Make ftracetest POSIX compliant

2019-02-22 Thread Juerg Haefliger
Add sh...@kernel.org and linux-kselft...@vger.kernel.org. The recent addition of colored output introduced some non-POSIX-compliant constructs. Fix that. Juerg Haefliger (2): selftests/ftrace: Replace echo -e with printf selftests/ftrace: Replace \e with \033 tools/testing/selftests/ftrace

[PATCH v2 0/2] selftests/ftrace: Make ftracetest POSIX compliant

2019-02-22 Thread Juerg Haefliger
The recent addition of colored output introduced some non-POSIX-compliant constructs. Fix that. Juerg Haefliger (2): selftests/ftrace: Replace echo -e with printf selftests/ftrace: Replace \e with \033 tools/testing/selftests/ftrace/ftracetest | 17 +++-- 1 file changed, 11

[PATCH v2 1/2] selftests/ftrace: Replace echo -e with printf

2019-02-22 Thread Juerg Haefliger
echo -e is not POSIX. Depending on what /bin/sh is, we can get incorrect output like: $ -e -n [1] Basic trace file check $ -e[PASS] Fix that by using printf instead. Signed-off-by: Juerg Haefliger --- tools/testing/selftests/ftrace/ftracetest | 9 +++-- 1 file changed, 7 insertions

[PATCH v2 2/2] selftests/ftrace: Replace \e with \033

2019-02-22 Thread Juerg Haefliger
The \e sequence character is not POSIX. Fix that by using \033 instead. Signed-off-by: Juerg Haefliger --- tools/testing/selftests/ftrace/ftracetest | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/tools/testing/selftests/ftrace/ftracetest b/tools/testing/selftests

Re: [PATCH] selftests/ftrace: Make the coloring POSIX compliant

2019-02-20 Thread Juerg Haefliger
On Wed, 20 Feb 2019 14:49:34 -0500 Steven Rostedt wrote: > On Wed, 20 Feb 2019 17:13:33 +0100 > Juerg Haefliger wrote: > > > echo -e and \e are not POSIX. Depending on what /bin/sh is, we can get > > incorrect output like: > > I'm curious to which shell this

[PATCH] selftests/ftrace: Make the coloring POSIX compliant

2019-02-20 Thread Juerg Haefliger
echo -e and \e are not POSIX. Depending on what /bin/sh is, we can get incorrect output like: $ -e -n [1] Basic trace file check $ -e[PASS] Fix that by using \033 instead of \e and printf. Signed-off-by: Juerg Haefliger --- tools/testing/selftests/ftrace/ftracetest | 17

[PATCH] selftests/ftrace: Handle the absence of tput

2019-02-20 Thread Juerg Haefliger
In environments where tput is not availbale, we get the following error $ ./ftracetest: 163: [: Illegal number: because ncolors is an empty string. Fix that by setting it to 0 if the tput command fails. Signed-off-by: Juerg Haefliger --- tools/testing/selftests/ftrace/ftracetest | 4 ++-- 1

Re: Redoing eXclusive Page Frame Ownership (XPFO) with isolated CPUs in mind (for KVM to isolate its guests per CPU)

2018-09-12 Thread Juerg Haefliger
On Wed, Sep 12, 2018 at 5:37 PM, Julian Stecklina wrote: > Julian Stecklina writes: > >> Linus Torvalds writes: >> >>> On Fri, Aug 31, 2018 at 12:45 AM Julian Stecklina >>> wrote: I've been spending some cycles on the XPFO patch set this week. For the patch set as it was posted

KAISER: kexec triggers a warning

2017-12-01 Thread Juerg Haefliger
Loading a kexec kernel using today's linux-tip master with KAISER=y triggers the following warning: [ 18.054017] [ cut here ] [ 18.054024] WARNING: CPU: 0 PID: 1183 at ./arch/x86/include/asm/pgtable_64.h:258 native_set_p4d+0x5f/0x80 [ 18.054025] Modules linked in: nls

Re: [PATCH 00/30] [v3] KAISER: unmap most of the kernel from userspace page tables

2017-11-20 Thread Juerg Haefliger
On Fri, Nov 10, 2017 at 8:30 PM, Dave Hansen wrote: > Thanks, everyone for all the reviews thus far. I hope I managed to > address all the feedback given so far, except for the TODOs of > course. This is a pretty minor update compared to v1->v2. > > These patches are all on top of Andy's entry c

Re: [Jfs-discussion] [PATCH] jfs: Add missing NULL pointer check in __get_metapage

2017-11-02 Thread Juerg Haefliger
On 11/02/2017 02:15 PM, Dave Kleikamp wrote: > On 11/02/2017 01:59 AM, Juerg Haefliger wrote: >> >> >> On 10/30/2017 11:13 PM, Dave Kleikamp wrote: >>> On 10/25/2017 02:50 AM, Juerg Haefliger wrote: >>>> Is this a patch you might consider? >

Re: [Jfs-discussion] [PATCH] jfs: Add missing NULL pointer check in __get_metapage

2017-11-01 Thread Juerg Haefliger
On 10/30/2017 11:13 PM, Dave Kleikamp wrote: > On 10/25/2017 02:50 AM, Juerg Haefliger wrote: >> Is this a patch you might consider? > > Sorry it's taken me so long to respond. > > I don't think this is the right fix. A failed allocation will still > result in

Re: [PATCH] jfs: Add missing NULL pointer check in __get_metapage

2017-10-25 Thread Juerg Haefliger
Is this a patch you might consider? Thanks ...Juerg On 10/04/2017 10:24 AM, Juerg Haefliger wrote: > alloc_metapage can return a NULL pointer so check for that. And also emit > an error message if that happens. > > Signed-off-by: Juerg Haefliger > --- > fs/jfs/j

[PATCH] jfs: Add missing NULL pointer check in __get_metapage

2017-10-04 Thread Juerg Haefliger
alloc_metapage can return a NULL pointer so check for that. And also emit an error message if that happens. Signed-off-by: Juerg Haefliger --- fs/jfs/jfs_metapage.c | 20 +--- 1 file changed, 13 insertions(+), 7 deletions(-) diff --git a/fs/jfs/jfs_metapage.c b/fs/jfs

Re: [PATCH v6 00/11] Add support for eXclusive Page Frame Ownership

2017-09-12 Thread Juerg Haefliger
On 09/12/2017 09:07 AM, Yisheng Xie wrote: > Hi Tycho, > > On 2017/9/11 23:02, Tycho Andersen wrote: >> Hi Yisheng, >> >> On Mon, Sep 11, 2017 at 06:34:45PM +0800, Yisheng Xie wrote: >>> Hi Tycho , >>> >>> On 2017/9/8 1:35, Tycho Andersen wrote: Hi all, Here is v6 of the XPFO set;

Re: [PATCH v6 03/11] mm, x86: Add support for eXclusive Page Frame Ownership (XPFO)

2017-09-11 Thread Juerg Haefliger
On 09/11/2017 04:50 PM, Tycho Andersen wrote: > Hi Yisheng, > > On Mon, Sep 11, 2017 at 03:24:09PM +0800, Yisheng Xie wrote: >>> +void xpfo_alloc_pages(struct page *page, int order, gfp_t gfp) >>> +{ >>> + int i, flush_tlb = 0; >>> + struct xpfo *xpfo; >>> + >>> + if (!static_branch_unlike

Re: [kernel-hardening] [PATCH v5 04/10] arm64: Add __flush_tlb_one()

2017-08-31 Thread Juerg Haefliger
On 08/30/2017 06:47 PM, Tycho Andersen wrote: > On Wed, Aug 30, 2017 at 07:31:25AM +0200, Juerg Haefliger wrote: >> >> >> On 08/23/2017 07:04 PM, Mark Rutland wrote: >>> On Wed, Aug 23, 2017 at 10:58:42AM -0600, Tycho Andersen wrote: >>>> Hi Mark, >>

Re: [kernel-hardening] [PATCH v5 04/10] arm64: Add __flush_tlb_one()

2017-08-29 Thread Juerg Haefliger
On 08/23/2017 07:04 PM, Mark Rutland wrote: > On Wed, Aug 23, 2017 at 10:58:42AM -0600, Tycho Andersen wrote: >> Hi Mark, >> >> On Mon, Aug 14, 2017 at 05:50:47PM +0100, Mark Rutland wrote: >>> That said, is there any reason not to use flush_tlb_kernel_range() >>> directly? >> >> So it turns out

[PATCH] lkdtm: Fix Oops when unloading the module

2017-01-19 Thread Juerg Haefliger
No jprobe is registered when the module is loaded without specifying a crashpoint that uses a jprobe. At the moment, we unconditionally try to unregister the jprobe on module unload which results in an Oops. Add a check to fix this. Signed-off-by: Juerg Haefliger --- drivers/misc/lkdtm_core.c

Re: [RFC PATCH v3 1/2] Add support for eXclusive Page Frame Ownership (XPFO)

2016-11-28 Thread Juerg Haefliger
page_ext->flags)); >> +set_bit(PAGE_EXT_XPFO_UNMAPPED, &page_ext->flags); >> +set_kpte(page, (unsigned long)kaddr, __pgprot(0)); >> +__flush_tlb_one((unsigned long)kaddr); > > Again __flush_tlb_one() is x86-specific. > flush_tlb_

Re: [RFC PATCH v3 1/2] Add support for eXclusive Page Frame Ownership (XPFO)

2016-11-15 Thread Juerg Haefliger
On 11/10/2016 08:24 PM, Kees Cook wrote: > On Fri, Nov 4, 2016 at 7:45 AM, Juerg Haefliger > wrote: >> This patch adds support for XPFO which protects against 'ret2dir' kernel >> attacks. The basic idea is to enforce exclusive ownership of page frames >> by eith

Re: [RFC PATCH v3 1/2] Add support for eXclusive Page Frame Ownership (XPFO)

2016-11-15 Thread Juerg Haefliger
Sorry for the late reply, I just found your email in my cluttered inbox. On 11/10/2016 08:11 PM, Kees Cook wrote: > On Fri, Nov 4, 2016 at 7:45 AM, Juerg Haefliger > wrote: >> This patch adds support for XPFO which protects against 'ret2dir' kernel >> attacks.

[RFC PATCH v3 2/2] xpfo: Only put previous userspace pages into the hot cache

2016-11-04 Thread Juerg Haefliger
Allocating a page to userspace that was previously allocated to the kernel requires an expensive TLB shootdown. To minimize this, we only put non-kernel pages into the hot cache to favor their allocation. Signed-off-by: Juerg Haefliger --- include/linux/xpfo.h | 2 ++ mm/page_alloc.c | 8

[RFC PATCH v3 0/2] Add support for eXclusive Page Frame Ownership (XPFO)

2016-11-04 Thread Juerg Haefliger
penalty Reference paper by the original patch authors: http://www.cs.columbia.edu/~vpk/papers/ret2dir.sec14.pdf Juerg Haefliger (2): Add support for eXclusive Page Frame Ownership (XPFO) xpfo: Only put previous userspace pages into the hot cache arch/x86/Kconfig | 3 +- arch/x8

[RFC PATCH v3 1/2] Add support for eXclusive Page Frame Ownership (XPFO)

2016-11-04 Thread Juerg Haefliger
need to be made XPFO-aware - Performance penalty Reference paper by the original patch authors: http://www.cs.columbia.edu/~vpk/papers/ret2dir.sec14.pdf Suggested-by: Vasileios P. Kemerlis Signed-off-by: Juerg Haefliger --- arch/x86/Kconfig | 3 +- arch/x86/mm/init.c | 2

Re: [kernel-hardening] [RFC PATCH v2 2/3] xpfo: Only put previous userspace pages into the hot cache

2016-09-20 Thread Juerg Haefliger
On 09/14/2016 04:48 PM, Dave Hansen wrote: >> On 09/02/2016 10:39 PM, Dave Hansen wrote: >>> On 09/02/2016 04:39 AM, Juerg Haefliger wrote: >>> Does this >>> just mean that kernel allocations usually have to pay the penalty to >>> convert a page? >>

Re: [kernel-hardening] [RFC PATCH v2 2/3] xpfo: Only put previous userspace pages into the hot cache

2016-09-14 Thread Juerg Haefliger
Hi Dave, On 09/14/2016 04:33 PM, Dave Hansen wrote: > On 09/14/2016 12:19 AM, Juerg Haefliger wrote: >> Allocating a page to userspace that was previously allocated to the >> kernel requires an expensive TLB shootdown. To minimize this, we only >> put non-kernel pages into t

Re: [RFC PATCH v2 0/3] Add support for eXclusive Page Frame Ownership (XPFO)

2016-09-14 Thread Juerg Haefliger
Resending to include the kernel-hardening list. Sorry, I wasn't subscribed with the correct email address when I sent this the first time. ...Juerg On 09/14/2016 09:18 AM, Juerg Haefliger wrote: > Changes from: > v1 -> v2: > - Moved the code from arch/x86/mm/ to mm/ s

[RFC PATCH v2 1/3] Add support for eXclusive Page Frame Ownership (XPFO)

2016-09-14 Thread Juerg Haefliger
need to be made XPFO-aware - Performance penalty Reference paper by the original patch authors: http://www.cs.columbia.edu/~vpk/papers/ret2dir.sec14.pdf Suggested-by: Vasileios P. Kemerlis Signed-off-by: Juerg Haefliger --- arch/x86/Kconfig | 3 +- arch/x86/mm/init.c | 2 +-

[RFC PATCH v2 3/3] block: Always use a bounce buffer when XPFO is enabled

2016-09-14 Thread Juerg Haefliger
This is a temporary hack to prevent the use of bio_map_user_iov() which causes XPFO page faults. Signed-off-by: Juerg Haefliger --- block/blk-map.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/block/blk-map.c b/block/blk-map.c index b8657fa8dc9a..e889dbfee6fb 100644 --- a

[RFC PATCH v2 2/3] xpfo: Only put previous userspace pages into the hot cache

2016-09-14 Thread Juerg Haefliger
Allocating a page to userspace that was previously allocated to the kernel requires an expensive TLB shootdown. To minimize this, we only put non-kernel pages into the hot cache to favor their allocation. Signed-off-by: Juerg Haefliger --- include/linux/xpfo.h | 2 ++ mm/page_alloc.c | 8

[RFC PATCH v2 0/3] Add support for eXclusive Page Frame Ownership (XPFO)

2016-09-14 Thread Juerg Haefliger
apers/ret2dir.sec14.pdf Juerg Haefliger (3): Add support for eXclusive Page Frame Ownership (XPFO) xpfo: Only put previous userspace pages into the hot cache block: Always use a bounce buffer when XPFO is enabled arch/x86/Kconfig | 3 +- arch/x86/mm/init.c | 2 +- block/b

Re: [PATCH 4.4 0/4] CVE fixes for 4.4

2016-09-07 Thread Juerg Haefliger
Hi Greg, Did you have a chance to look at the below 4 patches? Did I do something wrong when submitting them or are there other reasons not to include them in the 4.4 kernel? Btw, they still apply on top of 4.4.20. Thanks ...Juerg On 08/29/2016 03:38 PM, Juerg Haefliger wrote: > This pa

Re: [RFC PATCH v2 2/3] xpfo: Only put previous userspace pages into the hot cache

2016-09-05 Thread Juerg Haefliger
On 09/02/2016 10:39 PM, Dave Hansen wrote: > On 09/02/2016 04:39 AM, Juerg Haefliger wrote: >> Allocating a page to userspace that was previously allocated to the >> kernel requires an expensive TLB shootdown. To minimize this, we only >> put non-kernel pages into the hot

[RFC PATCH v2 2/3] xpfo: Only put previous userspace pages into the hot cache

2016-09-02 Thread Juerg Haefliger
Allocating a page to userspace that was previously allocated to the kernel requires an expensive TLB shootdown. To minimize this, we only put non-kernel pages into the hot cache to favor their allocation. Signed-off-by: Juerg Haefliger --- include/linux/xpfo.h | 2 ++ mm/page_alloc.c | 8

[RFC PATCH v2 3/3] block: Always use a bounce buffer when XPFO is enabled

2016-09-02 Thread Juerg Haefliger
This is a temporary hack to prevent the use of bio_map_user_iov() which causes XPFO page faults. Signed-off-by: Juerg Haefliger --- block/blk-map.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/block/blk-map.c b/block/blk-map.c index b8657fa8dc9a..e889dbfee6fb 100644 --- a

[RFC PATCH v2 1/3] Add support for eXclusive Page Frame Ownership (XPFO)

2016-09-02 Thread Juerg Haefliger
need to be made XPFO-aware - Performance penalty Reference paper by the original patch authors: http://www.cs.columbia.edu/~vpk/papers/ret2dir.sec14.pdf Suggested-by: Vasileios P. Kemerlis Signed-off-by: Juerg Haefliger --- arch/x86/Kconfig | 3 +- arch/x86/mm/init.c | 2 +-

[RFC PATCH v2 0/3] Add support for eXclusive Page Frame Ownership (XPFO)

2016-09-02 Thread Juerg Haefliger
apers/ret2dir.sec14.pdf Juerg Haefliger (3): Add support for eXclusive Page Frame Ownership (XPFO) xpfo: Only put previous userspace pages into the hot cache block: Always use a bounce buffer when XPFO is enabled arch/x86/Kconfig | 3 +- arch/x86/mm/init.c | 2 +- block/b

[PATCH] hyperv: Fix compilation issue with 4.4.19-rt27

2016-09-01 Thread Juerg Haefliger
needs to be fixed. This patch should be merged with: patches/0216-random-Make-it-work-on-rt.patch commit 20985550b01a21ba00a587d17d7c26da61e01acc random: Make it work on rt Signed-off-by: Juerg Haefliger Reviewed-by: T Makphaibulchoke --- drivers/hv/vmbus_drv.c | 2 +- 1 file changed, 1 insertion

[PATCH] net/ixgbe: Allow resetting VF admin mac to zero

2016-07-01 Thread Juerg Haefliger
. Fix this by allowing resetting a VF administrative MAC back to zero. Implementation and commit message shamelessly stolen from: commit 6e5224224faa ("net/mlx4_core: Allow resetting VF admin mac to zero") Signed-off-by: Juerg Haefliger --- drivers/net/ethernet/intel/ixgbe/ixgbe_s

Re: [RFC PATCH] Add support for eXclusive Page Frame Ownership (XPFO)

2016-03-21 Thread Juerg Haefliger
Hi Balbir, Apologies for the slow reply. On 03/01/2016 03:10 AM, Balbir Singh wrote: > > > On 27/02/16 01:21, Juerg Haefliger wrote: >> This patch adds support for XPFO which protects against 'ret2dir' kernel >> attacks. The basic idea is to enforce exclusive

Re: [RFC PATCH] Add support for eXclusive Page Frame Ownership (XPFO)

2016-03-21 Thread Juerg Haefliger
Hi Laura, Sorry for the late reply. I was on FTO and then traveling for the past couple of days. On 03/01/2016 02:31 AM, Laura Abbott wrote: > On 02/26/2016 06:21 AM, Juerg Haefliger wrote: >> This patch adds support for XPFO which protects against 'ret2dir' kernel >> a

[RFC PATCH] Add support for eXclusive Page Frame Ownership (XPFO)

2016-02-26 Thread Juerg Haefliger
ng wouldn't hurt. What tests to run though? Reference paper by the original patch authors: http://www.cs.columbia.edu/~vpk/papers/ret2dir.sec14.pdf Suggested-by: Vasileios P. Kemerlis Signed-off-by: Juerg Haefliger --- arch/x86/Kconfig | 2 +- arch/x86/Kconfig.debug | 17 ++

Re: [PATCH v2] scripts/sign-file.c: Add support for signing with a raw signature

2016-02-18 Thread Juerg Haefliger
On 02/10/2016 02:24 PM, Juerg Haefliger wrote: > On 02/10/2016 11:12 AM, David Howells wrote: >> Juerg Haefliger wrote: >> >>> This patch adds support for signing a kernel module with a raw >>> detached PKCS#7 signature/message. >>> >>> The signa

Re: [PATCH v2] scripts/sign-file.c: Add support for signing with a raw signature

2016-02-10 Thread Juerg Haefliger
On 02/10/2016 11:12 AM, David Howells wrote: > Juerg Haefliger wrote: > >> This patch adds support for signing a kernel module with a raw >> detached PKCS#7 signature/message. >> >> The signature is not converted and is simply appended to the module so >>

Re: [PATCH v2] scripts/sign-file.c: Add support for signing with a raw signature

2016-02-10 Thread Juerg Haefliger
On 02/10/2016 11:12 AM, David Howells wrote: > Juerg Haefliger wrote: > >> This patch adds support for signing a kernel module with a raw >> detached PKCS#7 signature/message. >> >> The signature is not converted and is simply appended to the module so >>

[PATCH v2] scripts/sign-file.c: Add support for signing with a raw signature

2016-02-04 Thread Juerg Haefliger
-nocerts -noattr -binary -in -inkey \ -signer -outform der -out The resulting raw signature from the above command is (more or less) identical to the raw signature that sign-file itself can produce like this: $ scripts/sign-file -d Signed-off-by: Juerg Haefliger --- scripts/sign-file.c

Re: [PATCH] scripts/sign-file.c: Add support for signing with a raw signature

2016-02-04 Thread Juerg Haefliger
On 02/03/2016 09:34 PM, David Howells wrote: > Juerg Haefliger wrote: > >> +static EVP_PKEY *read_private_key(char *private_key_name) > > const char * please. > >> +static X509 *read_x509(char *x509_name) > > And here. Why? These functions do return poin

[PATCH] scripts/sign-file.c: Add support for signing with a raw signature

2016-01-30 Thread Juerg Haefliger
-nocerts -noattr -binary -in -inkey \ -signer -outform der -out The resulting raw signature from the above command is (more or less) identical to the raw signature that sign-file itself can produce like this: $ scripts/sign-file -d Signed-off-by: Juerg Haefliger --- scripts/sign-file.c

Re: PKCS#7 parser and MS SpcSpOpusInfo OID

2016-01-25 Thread Juerg Haefliger
On Mon, Jan 18, 2016 at 3:54 PM, Juerg Haefliger wrote: > Hi, > > The pkcs7 kernel parser currently checks for the following AuthAttrs > (in pkcs7_sig_note_set_of_authattrs()): > > (ctx->msg->data_type == OID_msIndirectData && > !test_bit(sinfo_has_ms_opus_in

Re: [ANNOUNCE] 3.14.43-rt42

2015-06-18 Thread Juerg Haefliger
this list: send the line "unsubscribe linux-rt-users" in > the body of a message to majord...@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html -- Juerg Haefliger Hewlett-Packard -- To unsubscribe from this list: send the line "unsubscribe linux-kernel&quo

Re: [ANNOUNCE] 3.14.23-rt20

2014-11-05 Thread Juerg Haefliger
On Wed, Nov 5, 2014 at 3:27 PM, Steven Rostedt wrote: > On Wed, 5 Nov 2014 14:50:41 +0100 > Juerg Haefliger wrote: > >> On Sun, Nov 2, 2014 at 8:30 AM, Mike Galbraith >> wrote: >> > >> > On Fri, 2014-10-31 at 17:03 -0400, Steven Rostedt wrote: >> &g

Re: [ANNOUNCE] 3.14.23-rt20

2014-11-05 Thread Juerg Haefliger
Resending to the list due to mailer/html issues. On Sun, Nov 2, 2014 at 8:30 AM, Mike Galbraith wrote: > > On Fri, 2014-10-31 at 17:03 -0400, Steven Rostedt wrote: > > Dear RT Folks, > > > > I'm pleased to announce the 3.14.23-rt20 stable release. > > > > This is the first 3.14-rt release in the

Re: [PATCH] [159/2many] MAINTAINERS - DME1737 HARDWARE MONITOR DRIVER

2007-08-13 Thread Juerg Haefliger
AINTAINERS > @@ -1553,6 +1553,7 @@ P:Juerg Haefliger > M: [EMAIL PROTECTED] > L: [EMAIL PROTECTED] > S: Maintained +F: Documentation/hwmon/dme1737 > +F: drivers/hwmon/dme1737.c > > DOCBOOK FOR DOCUMENTATION > P: Randy Dunlap > - To unsubscribe

Re: [lm-sensors] Hardware monitoring subsystem maintainer position is open

2007-04-15 Thread Juerg Haefliger
Hi Mark, On 4/15/07, Mark M. Hoffman <[EMAIL PROTECTED]> wrote: Hi Jean, et al: * Jean Delvare <[EMAIL PROTECTED]> [2007-04-10 15:02:27 +0200]: > I am resigning from my role as hardware monitoring subsystem > (drivers/hwmon) maintainer. This is too much work for me, I do not have > the necessa

Re: [lm-sensors] Hardware monitoring subsystem maintainer position is open

2007-04-11 Thread Juerg Haefliger
Hi all, As pointed out by different people already, this is mainly a process issue. If we can get enough people together who are willing to contribute we can make this work. Obviously Jean did a great job (big thanks!) but I can't blame him for throwing the towel. I was always amazed at how much