Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S965215AbeAKS0z (ORCPT + 1 other); Thu, 11 Jan 2018 13:26:55 -0500 Received: from mail-it0-f68.google.com ([209.85.214.68]:42855 "EHLO mail-it0-f68.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S933141AbeAKS0y (ORCPT ); Thu, 11 Jan 2018 13:26:54 -0500 X-Google-Smtp-Source: ACJfBovqH24mmVoFNZl70YhYL5dISJZGvcz2BNi38GCmlJTLBJF3PAqHcy27/FvMZ48rhWY71fR61kUDUUzMcXhgLbQ= MIME-Version: 1.0 In-Reply-To: References: <1515502580-12261-1-git-send-email-w@1wt.eu> <1515502580-12261-7-git-send-email-w@1wt.eu> <20180110082207.GX29822@worktop.programming.kicks-ass.net> <20180110091102.GH14066@1wt.eu> <20180111064259.GC14920@1wt.eu> <0f08d89e-61e1-20e3-5c59-0b2f7b32bf0c@linux.intel.com> <20180111154412.GA15296@1wt.eu> <20180111174025.GB15344@1wt.eu> From: Linus Torvalds Date: Thu, 11 Jan 2018 10:26:52 -0800 X-Google-Sender-Auth: DTSVxVbmPiJJNNoQGmXOHgcg8-o Message-ID: Subject: Re: [RFC PATCH v2 6/6] x86/entry/pti: don't switch PGD on when pti_disable is set To: Willy Tarreau Cc: Andy Lutomirski , Dave Hansen , Peter Zijlstra , LKML , X86 ML , Borislav Petkov , Brian Gerst , Ingo Molnar , Thomas Gleixner , Josh Poimboeuf , "H. Peter Anvin" , Greg Kroah-Hartman , Kees Cook Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Return-Path: On Thu, Jan 11, 2018 at 10:25 AM, Linus Torvalds wrote: > > The other case may be the CLONE_NEW* operations. I *think* they are > noops as far as PTI settings would be, but I think people should think > about them. Oh, and yes, I think the npti flag should also break ptrace(). I do agree with Andy that it's a "capability", although I do not think it should actually be implemented as one. Linus