Re: [PATCH v7 0/7] Introduce support for Guest CET feature

2019-10-08 Thread Yang Weijiang
On Thu, Oct 03, 2019 at 09:33:45AM -0700, Jim Mattson wrote: > On Thu, Oct 3, 2019 at 5:59 AM Yang Weijiang wrote: > > > > On Wed, Oct 02, 2019 at 03:40:20PM -0700, Jim Mattson wrote: > > > On Thu, Sep 26, 2019 at 7:17 PM Yang Weijiang > > > wrote: > > > > > > > > Control-flow Enforcement

Re: [PATCH v7 0/7] Introduce support for Guest CET feature

2019-10-03 Thread Jim Mattson
On Thu, Oct 3, 2019 at 5:59 AM Yang Weijiang wrote: > > On Wed, Oct 02, 2019 at 03:40:20PM -0700, Jim Mattson wrote: > > On Thu, Sep 26, 2019 at 7:17 PM Yang Weijiang > > wrote: > > > > > > Control-flow Enforcement Technology (CET) provides protection against > > > Return/Jump-Oriented

Re: [PATCH v7 0/7] Introduce support for Guest CET feature

2019-10-03 Thread Yang Weijiang
On Wed, Oct 02, 2019 at 03:40:20PM -0700, Jim Mattson wrote: > On Thu, Sep 26, 2019 at 7:17 PM Yang Weijiang wrote: > > > > Control-flow Enforcement Technology (CET) provides protection against > > Return/Jump-Oriented Programming (ROP/JOP) attack. It includes two > > sub-features: Shadow Stack

Re: [PATCH v7 0/7] Introduce support for Guest CET feature

2019-10-02 Thread Jim Mattson
On Thu, Sep 26, 2019 at 7:17 PM Yang Weijiang wrote: > > Control-flow Enforcement Technology (CET) provides protection against > Return/Jump-Oriented Programming (ROP/JOP) attack. It includes two > sub-features: Shadow Stack (SHSTK) and Indirect Branch Tracking (IBT). > > KVM modification is

[PATCH v7 0/7] Introduce support for Guest CET feature

2019-09-26 Thread Yang Weijiang
Control-flow Enforcement Technology (CET) provides protection against Return/Jump-Oriented Programming (ROP/JOP) attack. It includes two sub-features: Shadow Stack (SHSTK) and Indirect Branch Tracking (IBT). KVM modification is required to support Guest CET feature. This patch serial implemented