Re: [Xen-devel] [PATCH for-4.13] x86/vvmx: Fix livelock with XSA-304 fix

2019-11-23 Thread Andrew Cooper
On 23/11/2019 05:56, Jürgen Groß wrote: > On 22.11.19 18:54, Andrew Cooper wrote: >> It turns out that the XSA-304 / CVE-2018-12207 fix of disabling >> executable >> superpages doesn't work well with the nested p2m code. >> >> Nested virt is experimental and not security supported, but is useful

Re: [Xen-devel] [PATCH for-4.13] x86/vvmx: Fix livelock with XSA-304 fix

2019-11-22 Thread Jürgen Groß
On 22.11.19 18:54, Andrew Cooper wrote: It turns out that the XSA-304 / CVE-2018-12207 fix of disabling executable superpages doesn't work well with the nested p2m code. Nested virt is experimental and not security supported, but is useful for development purposes. In order to not regress the

Re: [Xen-devel] [PATCH for-4.13] x86/vvmx: Fix livelock with XSA-304 fix

2019-11-22 Thread Andrew Cooper
On 22/11/2019 18:08, George Dunlap wrote: > On Fri, Nov 22, 2019 at 5:55 PM Andrew Cooper > wrote: >> It turns out that the XSA-304 / CVE-2018-12207 fix of disabling executable >> superpages doesn't work well with the nested p2m code. >> >> Nested virt is experimental and not security supported,

Re: [Xen-devel] [PATCH for-4.13] x86/vvmx: Fix livelock with XSA-304 fix

2019-11-22 Thread George Dunlap
On Fri, Nov 22, 2019 at 5:55 PM Andrew Cooper wrote: > > It turns out that the XSA-304 / CVE-2018-12207 fix of disabling executable > superpages doesn't work well with the nested p2m code. > > Nested virt is experimental and not security supported, but is useful for > development purposes. In

[Xen-devel] [PATCH for-4.13] x86/vvmx: Fix livelock with XSA-304 fix

2019-11-22 Thread Andrew Cooper
It turns out that the XSA-304 / CVE-2018-12207 fix of disabling executable superpages doesn't work well with the nested p2m code. Nested virt is experimental and not security supported, but is useful for development purposes. In order to not regress the status quo, disable the XSA-304 workaround