Received: by 2002:a25:6193:0:0:0:0:0 with SMTP id v141csp4591236ybb; Tue, 7 Apr 2020 10:24:38 -0700 (PDT) X-Google-Smtp-Source: APiQypLM0HIYOQHwJnslvkrHJrqm7mG9ZNF6Ux04FAjP9vYWadKcJM5kZDX/tVWFflXdVssvC+pD X-Received: by 2002:a05:6830:1f5a:: with SMTP id u26mr2517233oth.208.1586280278653; Tue, 07 Apr 2020 10:24:38 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1586280278; cv=none; d=google.com; s=arc-20160816; b=SXKe4vCNzqnyqJgxCJBmshKlkSlgeN6UNf7UX1i8HJjxvrbt9UO3V2rWnq6CQwERZp tyr3i+hbPflzgDfVv1F4E8imTuKdD7/YFA6bIf3m20/meVn7gflY9joCItTHfKEJtcZ9 7VF9PFjzfKum0aPGhT2wV//XvIkEIkwa+ptGQFc6F3GVi9dL64aRDh193b3kiVDf5WqU p29vKOG0z7XK2l25y0h3F6NT9k7IRsXefxLIFnrxWfWSfaE5fVa80MN5WQZMr1UHD2d+ NlUQDLtKK3NIne+bFvYJMcAVRFXm6cy988txNUfGi445qZSQEKBd7pXjE5uhizfIQ6BJ eTVA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-language :content-transfer-encoding:in-reply-to:mime-version:user-agent:date :message-id:from:references:cc:to:subject:ironport-sdr :dkim-signature; bh=bnIN8FKejISJ/Yhf74czIGj7ICfvf3lyv+iHbgoGXng=; b=O7CRkEofekLgFU4aUsCPcDd8tWRZDfvCS9TiVce47ED0Fmpn7P2yem4ZAwY4x92o1P tIiYrfplMtdEVLmkff2Vnw3hz700qdEx9W6075BLUKVVqi6YbdFlZ1AO+CEl3Nj/Ra6O ple4y8cGT+ahL5xwGbZQmb8Ce5HldilgYkCHNx2RknTuFOgmrHZBAx/Rr0rnwO+h7GBC K4j/2Ka2l8Dl4bfx5jLIRnnUlkSeAZERcOQO2z3th23DUwA+JP/DeMUnwCzW8L/4AnnK fzuDL8Dv9FRLcqi6ktsfI9rbI2AwqvRPfNyquI0cJJByYXDsDmbKT0fD3YVRLudIocFK vrFA== ARC-Authentication-Results: i=1; mx.google.com; dkim=fail header.i=@citrix.com header.s=securemail header.b=VtsgH6nV; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=citrix.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id j9si851219oif.164.2020.04.07.10.24.24; Tue, 07 Apr 2020 10:24:38 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=fail header.i=@citrix.com header.s=securemail header.b=VtsgH6nV; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=citrix.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726638AbgDGRXf (ORCPT + 99 others); Tue, 7 Apr 2020 13:23:35 -0400 Received: from esa5.hc3370-68.iphmx.com ([216.71.155.168]:26114 "EHLO esa5.hc3370-68.iphmx.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726277AbgDGRXe (ORCPT ); Tue, 7 Apr 2020 13:23:34 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=citrix.com; s=securemail; t=1586280213; h=subject:to:cc:references:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=bnIN8FKejISJ/Yhf74czIGj7ICfvf3lyv+iHbgoGXng=; b=VtsgH6nVHZz+5YGCNEVyTUPHV6WRMrVgQVDJLHlKDS1pT8wVEeK/k46d LTv6uc8ZfxZEW4shitnn7K2BDUjlHOq3qIbfq6j4zToVZQimpBWO9Bb/R tU9CkOaqeYY2L55r/Rfn4IbQtMHBxvDNJ2FpYcikPrkXjCERT67l0Alip c=; Authentication-Results: esa5.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none; spf=None smtp.pra=andrew.cooper3@citrix.com; spf=Pass smtp.mailfrom=Andrew.Cooper3@citrix.com; spf=None smtp.helo=postmaster@mail.citrix.com Received-SPF: None (esa5.hc3370-68.iphmx.com: no sender authenticity information available from domain of andrew.cooper3@citrix.com) identity=pra; client-ip=162.221.158.21; receiver=esa5.hc3370-68.iphmx.com; envelope-from="Andrew.Cooper3@citrix.com"; x-sender="andrew.cooper3@citrix.com"; x-conformance=sidf_compatible Received-SPF: Pass (esa5.hc3370-68.iphmx.com: domain of Andrew.Cooper3@citrix.com designates 162.221.158.21 as permitted sender) identity=mailfrom; client-ip=162.221.158.21; receiver=esa5.hc3370-68.iphmx.com; envelope-from="Andrew.Cooper3@citrix.com"; x-sender="Andrew.Cooper3@citrix.com"; x-conformance=sidf_compatible; x-record-type="v=spf1"; x-record-text="v=spf1 ip4:209.167.231.154 ip4:178.63.86.133 ip4:195.66.111.40/30 ip4:85.115.9.32/28 ip4:199.102.83.4 ip4:192.28.146.160 ip4:192.28.146.107 ip4:216.52.6.88 ip4:216.52.6.188 ip4:162.221.158.21 ip4:162.221.156.83 ip4:168.245.78.127 ~all" Received-SPF: None (esa5.hc3370-68.iphmx.com: no sender authenticity information available from domain of postmaster@mail.citrix.com) identity=helo; client-ip=162.221.158.21; receiver=esa5.hc3370-68.iphmx.com; envelope-from="Andrew.Cooper3@citrix.com"; x-sender="postmaster@mail.citrix.com"; x-conformance=sidf_compatible IronPort-SDR: 8CRmZTnoOOzUpPBRRDUY3uK4lYB8xTkS/1jb1N2OHMqUpsF1kIGTrSTS53IoBPEbWaG9+nNyfU I8UDvTvs9F5Dpdrx9KpwiRv8r93K0FYIQuEsAxjbCAWISianP/a1PicsC9SWtqWMHKFm4dsU91 D8yVRCqo0I4xi7mDYCyudxfNNFj3Uwi3PpvBgAMVS7Y0cnjNY/CmDo4LwoOqZTEp0eyEf9vNF/ dfyySLF7us9B+coABwywOy8z09WHMKkhVArjyAzM3kGMCDUyxRdOZ/aaK+kfUMEY0bN4AJQ81u zpM= X-SBRS: 2.7 X-MesageID: 15639610 X-Ironport-Server: esa5.hc3370-68.iphmx.com X-Remote-IP: 162.221.158.21 X-Policy: $RELAYED X-IronPort-AV: E=Sophos;i="5.72,355,1580792400"; d="scan'208";a="15639610" Subject: Re: [PATCH 0/4] x86/module: Out-of-tree module decode and sanitize To: Peter Zijlstra , , CC: , , , , , , , , , , , , , , , , , , , , , References: <20200407110236.930134290@infradead.org> From: Andrew Cooper Message-ID: Date: Tue, 7 Apr 2020 18:23:27 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.4.1 MIME-Version: 1.0 In-Reply-To: <20200407110236.930134290@infradead.org> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Content-Language: en-GB X-ClientProxiedBy: AMSPEX02CAS01.citrite.net (10.69.22.112) To AMSPEX02CL02.citrite.net (10.69.22.126) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 07/04/2020 12:02, Peter Zijlstra wrote: > Hi all, > > Driven by the SLD vs VMX interaction, here are some patches that provide means > to analyze the text of out-of-tree modules. > > The first user of that is refusing to load modules on VMX-SLD conflicts, but it > also has a second patch that refulses to load any module that tries to modify > CRn/DRn. > > I'm thinking people will quickly come up with more and more elaborate tests to > which to subject out-of-tree modules. Anything playing with LGDT & friends?  Shouldn't be substantially more elaborate than CR/DR to check for. ~Andrew