>>> On 20.04.15 at 19:09, <andrew.coop...@citrix.com> wrote:
> A different approach, given the dual nature of the AC flag now is to gate
> setup_smap() on a kernel rpl of 0.  SMAP necessarily can't be used in a
> paravirtual situation where the kernel runs in cpl > 0.

"Can't" isn't true here - for 64-bit PV Xen guests, which already
toggle between two page table variants for kernel and user mode,
it would be possible (but perhaps expensive) to mimic the needed
behavior by introducing a 3rd set of page tables, containing only
the kernel mappings. You may recall that I had even posted an
RFC patch to tat effect about a year ago.

Jan


_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel

Reply via email to