Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752670AbdGMVav (ORCPT ); Thu, 13 Jul 2017 17:30:51 -0400 Received: from mail-qt0-f194.google.com ([209.85.216.194]:33798 "EHLO mail-qt0-f194.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751153AbdGMVat (ORCPT ); Thu, 13 Jul 2017 17:30:49 -0400 MIME-Version: 1.0 In-Reply-To: <20170713203704.GA5538@ram.oc3035372033.ibm.com> References: <1499289735-14220-1-git-send-email-linuxram@us.ibm.com> <1499289735-14220-15-git-send-email-linuxram@us.ibm.com> <20170712132825.2a37e2e9@firefly.ozlabs.ibm.com> <20170713074500.GF5525@ram.oc3035372033.ibm.com> <20170713203704.GA5538@ram.oc3035372033.ibm.com> From: Balbir Singh Date: Fri, 14 Jul 2017 07:30:46 +1000 Message-ID: Subject: Re: [RFC v5 14/38] powerpc: initial plumbing for key management To: Ram Pai Cc: "open list:LINUX FOR POWERPC (32-BIT AND 64-BIT)" , "linux-kernel@vger.kernel.org" , linux-arch , linux-mm , "maintainer:X86 ARCHITECTURE (32-BIT AND 64-BIT)" , "open list:DOCUMENTATION" , linux-kselftest@vger.kernel.org, Benjamin Herrenschmidt , Paul Mackerras , Michael Ellerman , Anshuman Khandual , Aneesh Kumar KV , Dave Hansen , "Haren Myneni/Beaverton/IBM" , Arnd Bergmann , "akpm@linux-foundation.org" , Jonathan Corbet , Ingo Molnar Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1423 Lines: 35 On Fri, Jul 14, 2017 at 6:37 AM, Ram Pai wrote: > On Thu, Jul 13, 2017 at 12:45:00AM -0700, Ram Pai wrote: >> On Wed, Jul 12, 2017 at 01:28:25PM +1000, Balbir Singh wrote: >> > On Wed, 5 Jul 2017 14:21:51 -0700 >> > Ram Pai wrote: >> > >> > > Initial plumbing to manage all the keys supported by the >> > > hardware. >> > > >> > > Total 32 keys are supported on powerpc. However pkey 0,1 >> > > and 31 are reserved. So effectively we have 29 pkeys. >> > > >> > > This patch keeps track of reserved keys, allocated keys >> > > and keys that are currently free. >> > >> > It looks like this patch will only work in guest mode? >> > Is that an assumption we've made? What happens if I use >> > keys when running in hypervisor mode? >> >> It works in supervisor mode, as a guest aswell as a bare-metal >> kernel. Whatever needs to be done in hypervisor mode >> is already there in power-kvm. > > I realize i did not answer your question accurately... > "What happens if I use keys when running in hypervisor mode?" > > Its not clear what happens. As far as I can tell the MMU does > not check key violation when in hypervisor mode. So effectively > I think, keys are ineffective when in hypervisor mode. keys are honored in hypervisor mode. I was just stating that we need a mechanism used by the hypervisor to partition the key space between guests and hypervisor. Balbir Singh