Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S965193AbeALUlL (ORCPT + 1 other); Fri, 12 Jan 2018 15:41:11 -0500 Received: from atrey.karlin.mff.cuni.cz ([195.113.26.193]:38843 "EHLO atrey.karlin.mff.cuni.cz" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S964851AbeALUlK (ORCPT ); Fri, 12 Jan 2018 15:41:10 -0500 Date: Fri, 12 Jan 2018 21:41:08 +0100 From: Pavel Machek To: Linus Torvalds Cc: Arnd Bergmann , Olivier Galibert , Linux Kernel Mailing List , jikos@suse.cz Subject: Re: Linux 4.15-rc7 Message-ID: <20180112204108.GB4918@amd> References: <20180110233252.GA14739@amd> <20180112110624.GA13254@amd> <20180112193815.GA4918@amd> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="0ntfKIWw70PvrIHh" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Return-Path: --0ntfKIWw70PvrIHh Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri 2018-01-12 11:44:48, Linus Torvalds wrote: > On Fri, Jan 12, 2018 at 11:38 AM, Pavel Machek wrote: > > > > I'll try to do the right thing. OTOH... I don't like the fact that > > kernel memory on my machine is currently readable, probably even from > > javascript. >=20 > Oh, absolutely. I'm just saying that it's probably best to try to > start from the x86-64 KPTI model, and see how that works for x86-32. >=20 > Maybe some of the 4G:4G entry code could come in handy as a "these are > the issues" kind of thing. Ok, so I do have the diff that compiles, and it is 300 lines. Those will be extremely tricky 300 lines, but... > > I tried disabling CPU caches. Just like that, off, boom. My system > > will not survive that, and it looks like 100x slowdown. >=20 > Yeah, no. That is not a realistic thing to do on any hardware since > the PPro, I'm afraid. What is special about PPro? Well -- cache off kind of is what I want -- kills Spectre _and_ Meltdown ;-), attacking close to the fundametal issue. And it really should be doable on UP system, right? I guess I should re-try with plain VGA console, not framebuffer. =09 Pavel --=20 (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blo= g.html --0ntfKIWw70PvrIHh Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlpZHWQACgkQMOfwapXb+vJ+hwCeJBPgujS0eItkB925Fixs9B/+ 5EAAniPumz3aP7kv8O/7J+2q+tXrDhBC =ZA8O -----END PGP SIGNATURE----- --0ntfKIWw70PvrIHh--