Hi Dave,
On 5/12/20 7:45 PM, Dave Hansen wrote:
On 5/4/20 7:49 AM, Alexandre Chartre wrote:
This version 4 of the kernel Address Space Isolation (ASI) RFC. I have
broken it down into three distinct parts:
- Part I: ASI Infrastructure and PTI (this part)
- Part II: Decorated Page-Table
- Part III: ASI Test Driver and CLI
Part I is similar to RFCv3 [3] with some small bug fixes. Parts II and III
extend the initial patchset: part II introduces decorated page-table in
order to provide convenient page-table management functions, and part III
provides a driver and CLI for testing ASI (using parts I and II).
These look interesting. I haven't found any holes in your methods,
although the interrupt depth tracking worries me a bit. I tried and
failed to do a similar thing with PTI in the NMI path, but you might
have just bested me there. :)
Thanks for taking a look. I am glad it seems okay, I have run several tests
and was unable to have it fail (so far) while previous versions were easily
breakable.
It's very interesting that you've been able to implement PTI underneath
all of this, and the "test driver" is really entertaining!
Yeah, this a kind of PTI on steroid as part of the implementation was done
based on the PTI implementation but making it more generic. The test driver
has proven very useful for testing and debugging. I am currently using it
(with some extensions) for helping me define the KVM ASI: I can connect the
driver to a KVM ASI, dump the KVM ASI faults and dynamically add mappings;
this is very handy.
That said, this is working in some of the nastiest corners of the x86
code and this is going to take quite an investment to get reviewed. I'm
not *quite* sure it's all worth it.
I am also concerned about making changes in all these nasty corners. I am a
bit more confident now that it is working to implement PTI because PTI provides
a good stress test for ASI. I am also waiting for (and reviewing) all x86/entry
changes from tglx; this greatly cleans up the entry code and will hopefully help
for the integration of ASI. I will rebase as soon as these all changes are
integrated and check the benefit for ASI.
So, this isn't being ignored, I'm just not quite sure what to do with
it, yet.
I am working on defining ASI for KVM. Hopefully this will provide a good
usage example, and make the changes more compelling.
Thanks.
alex.
