Re: [PATCH v3 32/32] KVM: arm64: Protect the .hyp sections from the host

2021-03-05 Thread Will Deacon
On Tue, Mar 02, 2021 at 03:00:02PM +, Quentin Perret wrote: > When KVM runs in nVHE protected mode, use the host stage 2 to unmap the > hypervisor sections. The long-term goal is to ensure the EL2 code can > remain robust regardless of the host's state, so this starts by making > sure the host

[PATCH v3 32/32] KVM: arm64: Protect the .hyp sections from the host

2021-03-02 Thread Quentin Perret
When KVM runs in nVHE protected mode, use the host stage 2 to unmap the hypervisor sections. The long-term goal is to ensure the EL2 code can remain robust regardless of the host's state, so this starts by making sure the host cannot e.g. write to the .hyp sections directly. Signed-off-by: