On Tue, Jul 11, 2023 at 09:12:57AM -0500, Carlos Bilbao wrote: > Kernel developers working on confidential computing for virtualized > environments in x86 operate under a set of assumptions regarding the Linux > kernel threat model that differs from the traditional view. Historically, > the Linux threat model acknowledges attackers residing in userspace, as > well as a limited set of external attackers that are able to interact with > the kernel through networking or limited HW-specific exposed interfaces > (e.g. USB, thunderbolt). The goal of this document is to explain additional > attack vectors that arise in the virtualized confidential computing space > and discuss the proposed protection mechanisms for the Linux kernel. When you have a "and" in a changelog text, that's a huge hint that it needs to be split up into multiple patches. And that's the case here, you want to do two things, describe your crazy model of different attack vectors AND propose new ways to protect from them. The "propose new ways" should be coming in ONLY with actual patches that do such a thing, as it's a useless document without that (we don't take proposed document updates without actual kernel changes that implement them for obvious reasons, nor would you want us to.) So how about triming this down more to just the first part, where you all agree on a different threat model, and then you all can go of and propose different potential solutions to this newly designed threat model and we will be able to evaluate them based on working code, not just design documents. thanks, greg k-h
