Skip to content

KVM: arm64: Restrict host hypercalls when pKVM is enabled

Will Deacon kvmarm linux-arm-kernel 3 versions – Applied

Status from this message: Applied to next, thanks!

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v3 Latest6 patches 1 replyApplied
  2. v25 patches 3 repliesSuperseded
  3. v15 patches 11 repliesSuperseded

Patches in v3 Applied

#Subject and filesSizeRepliesApplied
1/6KVM: arm64: Turn __KVM_HOST_SMCCC_FUNC_* into an enum (mostly)arch/arm64/include/asm/kvm_asm.h+24 -200 replies
2/6arm64: Prevent kexec and hibernation if is_protected_kvm_enabled()arch/arm64/kernel/smp.c+2 -10 replies
3/6KVM: arm64: Reject stub hypercalls after pKVM has been initialisedarch/arm64/kvm/arm.c arch/arm64/kvm/hyp/nvhe/host.S+40 -170 replies
4/6KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercallarch/arm64/kvm/arm.c+19 -110 replies
5/6KVM: arm64: Prevent re-finalisation of pKVM for a given CPUarch/arm64/kvm/hyp/nvhe/mem_protect.c+3 -00 replies
6/6KVM: arm64: Disable privileged hypercalls after pKVM finalisationarch/arm64/include/asm/kvm_asm.h arch/arm64/kvm/hyp/nvhe/hyp-main.c+40 -220 replies

Reviews trailers per patch

1 of 6 patches has a Reviewed-by or Acked-by.

PatchWill Deacon
1/6A-b
2/6
3/6
4/6
5/6
6/6

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v3 thread

Cover letter [PATCH v3 0/6] KVM: arm64: Restrict host hypercalls when pKVM is enabled

Hi again folks,

This is version three of the patches I previously posted here:

v1: https://lore.kernel.org/r/[email protected]
v2: https://lore.kernel.org/r/[email protected]

Changes since v3 are:

- Included proposed cleanup (using an enum) from Marc
- Rebased onto -rc4

Cheers,

Will

Cc Marc Zyngier <[email protected]>
Cc Quentin Perret <[email protected]>
Cc Catalin Marinas <[email protected]>
Cc Alexandru Elisei <[email protected]>
Cc Suzuki K Poulose <[email protected]>
Cc Mark Rutland <[email protected]>

--->8

Marc Zyngier (1):
KVM: arm64: Turn __KVM_HOST_SMCCC_FUNC_* into an enum (mostly)

Will Deacon (5):
arm64: Prevent kexec and hibernation if is_protected_kvm_enabled()
KVM: arm64: Reject stub hypercalls after pKVM has been initialised
KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall
KVM: arm64: Prevent re-finalisation of pKVM for a given CPU
KVM: arm64: Disable privileged hypercalls after pKVM finalisation

 arch/arm64/include/asm/kvm_asm.h      | 47 ++++++++++++---------
 arch/arm64/kernel/smp.c               |  3 +-
 arch/arm64/kvm/arm.c                  | 61 ++++++++++++++++++---------
 arch/arm64/kvm/hyp/nvhe/host.S        | 26 ++++++++----
 arch/arm64/kvm/hyp/nvhe/hyp-main.c    | 37 +++++++++++-----
 arch/arm64/kvm/hyp/nvhe/mem_protect.c |  3 ++
 6 files changed, 117 insertions(+), 60 deletions(-)
Signature · 6 lines
2.33.0.882.g93a45727a2-goog

_______________________________________________
kvmarm mailing list
[email protected]
https://lists.cs.columbia.edu/mailman/listinfo/kvmarm