Received: by 2002:ac0:a5b6:0:0:0:0:0 with SMTP id m51-v6csp2251878imm; Thu, 7 Jun 2018 07:44:01 -0700 (PDT) X-Google-Smtp-Source: ADUXVKLj67zV+8sPgGn2nijQ42O5CAll2VLNMGCyd7tj1r2eUswNvVzTottfQvonFiu0aG8JK+Uk X-Received: by 2002:a65:5a07:: with SMTP id y7-v6mr1784629pgs.177.1528382641503; Thu, 07 Jun 2018 07:44:01 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1528382641; cv=none; d=google.com; s=arc-20160816; b=BZ0ifteZ4XiLPhkbQC3BvDHKPljmQBU3WRKHSVGQE4F0i6/8cJS5wPFIVE9rh8t7Pn hNvcu64CfNwai+aSThzX0iVfgC8QfMPyjfMl3ozBMAathCU931egJuc5DGjPUy56bu/v hRbjLXPZYAaFcHOrL9DthFtHhyKCTqhMrCDEUvypoW5oRrbot5vu52vVZeNLDQc2lqQl 72OzPofPTayDiymuwqk6BF7Nk0YiZIpitRSU2SxfnORIA6MpeyWglbXU5unRVK8FA3H+ w5YquQldqYLCcZqlwPxe6ojGwkyoX7w2XrFewayAHdf2WiwwnqaolQVviwMeOxRLgOG/ a8aA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:message-id:date:subject:cc:to:from :arc-authentication-results; bh=ZkYI8puB4xo47OIAbxhzG7J8fnvNV80WppCw/GVGcBQ=; b=Rbv9FT2ckYc/KK0P2I/S99kzAMHOgolSGB0z7ReiUwvn08LNYr9hZOwj7K/xvWmdks BLh8DDLGeox38YGAhYmUJ78NIj+4jdqFakje0Aq63XqunE8dAIMz0JnwqJsKnQJuHbdz 0ptvQsanH9dU56keloPyNHXlRrVnY3/G3ED10rW8dnpR75/58Oxq6zLF4wY3mk1D2SGA 5rKq/0BhjLPPPHoPRlyry8tQMv8Pok9BcDPATrHei8wZtnksZd86WbatbqCKQUbQUNqC jvSx6VQTC0COoYh9q2MXi/kVfsL3ftK0aA60pFRp8aSKgB/0RwLYmEUNHXwzAU9g2cvz kIXw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id k2-v6si9371309pgr.206.2018.06.07.07.43.47; Thu, 07 Jun 2018 07:44:01 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S934776AbeFGOml (ORCPT + 99 others); Thu, 7 Jun 2018 10:42:41 -0400 Received: from mga17.intel.com ([192.55.52.151]:61234 "EHLO mga17.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S933109AbeFGOma (ORCPT ); Thu, 7 Jun 2018 10:42:30 -0400 X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga006.fm.intel.com ([10.253.24.20]) by fmsmga107.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Jun 2018 07:42:29 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.49,486,1520924400"; d="scan'208";a="235505935" Received: from 2b52.sc.intel.com ([143.183.136.51]) by fmsmga006.fm.intel.com with ESMTP; 07 Jun 2018 07:42:29 -0700 From: Yu-cheng Yu To: linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-mm@kvack.org, linux-arch@vger.kernel.org, x86@kernel.org, "H. Peter Anvin" , Thomas Gleixner , Ingo Molnar , "H.J. Lu" , Vedvyas Shanbhogue , "Ravi V. Shankar" , Dave Hansen , Andy Lutomirski , Jonathan Corbet , Oleg Nesterov , Arnd Bergmann , Mike Kravetz Cc: Yu-cheng Yu Subject: [PATCH 0/7] Control Flow Enforcement - Part (4) Date: Thu, 7 Jun 2018 07:38:48 -0700 Message-Id: <20180607143855.3681-1-yu-cheng.yu@intel.com> X-Mailer: git-send-email 2.15.1 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org This series introduces CET - indirect branch tracking The major task of indirect branch tracking is for the compiler to insert the ENDBR instructions at all valid branch targets. The kernel provides: CPUID enumeration and feature setup; Legacy bitmap allocation; Some basic supporting routines. In this patch, there are also a CET command-line utility and PTRACE support. H.J. Lu (2): x86: Insert endbr32/endbr64 to vDSO tools: Add cetcmd Yu-cheng Yu (5): x86/cet: Add Kconfig option for user-mode Indirect Branch Tracking x86/cet: User-mode indirect branch tracking support mm/mmap: Add IBT bitmap size to address space limit check x86/cet: add arcp_prctl functions for indirect branch tracking x86/cet: Add PTRACE interface for CET arch/x86/Kconfig | 12 +++ arch/x86/entry/vdso/.gitignore | 4 + arch/x86/entry/vdso/Makefile | 34 +++++++ arch/x86/entry/vdso/endbr.sh | 32 ++++++ arch/x86/include/asm/cet.h | 9 ++ arch/x86/include/asm/disabled-features.h | 8 +- arch/x86/include/asm/fpu/regset.h | 7 +- arch/x86/include/uapi/asm/prctl.h | 1 + arch/x86/include/uapi/asm/resource.h | 5 + arch/x86/kernel/cet.c | 73 ++++++++++++++ arch/x86/kernel/cet_prctl.c | 54 +++++++++- arch/x86/kernel/cpu/common.c | 20 +++- arch/x86/kernel/elf.c | 19 +++- arch/x86/kernel/fpu/regset.c | 41 ++++++++ arch/x86/kernel/process.c | 2 + arch/x86/kernel/ptrace.c | 16 +++ include/uapi/asm-generic/resource.h | 3 + include/uapi/linux/elf.h | 1 + mm/mmap.c | 8 +- tools/Makefile | 13 +-- tools/arch/x86/include/uapi/asm/elf_property.h | 16 +++ tools/arch/x86/include/uapi/asm/prctl.h | 33 ++++++ tools/cet/.gitignore | 1 + tools/cet/Makefile | 11 ++ tools/cet/cetcmd.c | 134 +++++++++++++++++++++++++ tools/include/uapi/asm/elf_property.h | 4 + tools/include/uapi/asm/prctl.h | 4 + 27 files changed, 549 insertions(+), 16 deletions(-) create mode 100644 arch/x86/entry/vdso/endbr.sh create mode 100644 tools/arch/x86/include/uapi/asm/elf_property.h create mode 100644 tools/arch/x86/include/uapi/asm/prctl.h create mode 100644 tools/cet/.gitignore create mode 100644 tools/cet/Makefile create mode 100644 tools/cet/cetcmd.c create mode 100644 tools/include/uapi/asm/elf_property.h create mode 100644 tools/include/uapi/asm/prctl.h -- 2.15.1