Re: [PATCH v7 00/14] x86/alternative: text_poke() enhancements

2018-12-09 Thread Nadav Amit
> On Dec 6, 2018, at 2:03 AM, Peter Zijlstra wrote: > > On Tue, Dec 04, 2018 at 05:33:54PM -0800, Nadav Amit wrote: >> Which leads me to (b) - the patch-set is big "enough" IMHO. Indeed, >> there are open security issues in the kernel when it comes to W^X. But >> some people would want to use An

Re: [PATCH v7 00/14] x86/alternative: text_poke() enhancements

2018-12-06 Thread Peter Zijlstra
On Tue, Dec 04, 2018 at 05:33:54PM -0800, Nadav Amit wrote: > Which leads me to (b) - the patch-set is big "enough" IMHO. Indeed, > there are open security issues in the kernel when it comes to W^X. But > some people would want to use Andy's temporary mm-struct for other uses. > So additional secu

[PATCH v7 00/14] x86/alternative: text_poke() enhancements

2018-12-05 Thread Nadav Amit
This patch-set addresses some issues that might affect the security and the correctness of code patching. It was originally small and mainly intended to remove the text-poking fixmap PTEs, which can cause PTEs cached in the TLB in remote cores for unbounded time. It was then suggested by tglx and