linux

iv/linux

History

Rick Edgecombe 98cfa46309 x86: Introduce userspace API for shadow stack

Add three new arch_prctl() handles:

 - ARCH_SHSTK_ENABLE/DISABLE enables or disables the specified
   feature. Returns 0 on success or a negative value on error.

 - ARCH_SHSTK_LOCK prevents future disabling or enabling of the
   specified feature. Returns 0 on success or a negative value
   on error.

The features are handled per-thread and inherited over fork(2)/clone(2),
but reset on exec().

Co-developed-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
Signed-off-by: Rick Edgecombe <rick.p.edgecombe@intel.com>
Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com>
Reviewed-by: Borislav Petkov (AMD) <bp@alien8.de>
Reviewed-by: Kees Cook <keescook@chromium.org>
Acked-by: Mike Rapoport (IBM) <rppt@kernel.org>
Tested-by: Pengfei Xu <pengfei.xu@intel.com>
Tested-by: John Allen <john.allen@amd.com>
Tested-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/all/20230613001108.3040476-27-rick.p.edgecombe%40intel.com

2023-08-02 15:01:50 -07:00

alpha

mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()

2023-07-11 14:10:56 -07:00

arc

mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()

2023-07-11 14:10:56 -07:00

arm

mm: Rename arch pte_mkwrite()'s to pte_mkwrite_novma()

2023-07-11 14:10:56 -07:00

arm64

mm: Move pte/pmd_mkwrite() callers with no VMA to _novma()