Received: by 2002:a25:868d:0:0:0:0:0 with SMTP id z13csp868377ybk; Fri, 15 May 2020 16:10:44 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxWvzFUIpHuYsTZLAaEeuBnCXGkEnpP5i/NQk5vgU9glIKn/F4TBSIiM9FDa0E1owXsd5Jz X-Received: by 2002:a17:906:24d8:: with SMTP id f24mr5294071ejb.215.1589584244217; Fri, 15 May 2020 16:10:44 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1589584244; cv=none; d=google.com; s=arc-20160816; b=FkY2D2M9ex2qBtUqQBOLO4lIAKtj8DuGd/CfqF3ZbPaXXTYFD3jY8Hnlc1dt/z0J0M zoytrvnYF5+w8vB3cdKD52TyQfe1TMbN/ygcJYAf3LxhLD4AoN/cYROscTBR1SbDPpzf z71pZPuXdo9HvCWEHZjJKDHz+zVO2FRHCXYhxnwks5eD/KpjOPBnyeGQDvaGZkiSb70z X8x6fgT96QBHPKLBstdIItyL476E8v+YUIl9/Z2Seju3yA401KcK3cOZwD4EFBxTW7kQ 6Z4+VLPQAiGRSOdU8uOLWMV7BKH061N4kzLo0Z0BdWuCOP7eLlD+aBHXfad86lgSkzzR DTYA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date:dkim-signature; bh=5CYoFu2eMOuL7jCIiEaor12rLmq26QjPJ1/PqILwj7w=; b=g+wzchzrKCzl2JV3SSdWM8nHlqs9kk4f1rESyH3aOjurjc8nooGQCZTq0fosK6pHOM oW0sGCgvnAxahTILuy1y/9tfjtCZha1G7ojTpph2mMvqAYHbMiM4IYZMhWyQa4qkZY43 LXqemZJfRTgnSbQvv1GvRiAH1xUafRRjaWSpNOt2ks9MnVFFEeg9zR+wLOoEwh97MB6q zzl5OHqiubSCsWvIgqSPMeTqD3dH+zisBNUYd4pto83hcSdylm/CK3nkIItLzlhpcdK8 XXzhlC6WTxjeLfqW88i4dtDdgg8RHAZkWYn/cvzQCTcfPX2MbgjD+Yd2gH1glrmrYYRm dTMQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=default header.b=ujca5DMs; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id u4si2044679edy.214.2020.05.15.16.10.21; Fri, 15 May 2020 16:10:44 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=default header.b=ujca5DMs; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726786AbgEOXHm (ORCPT + 99 others); Fri, 15 May 2020 19:07:42 -0400 Received: from mail.kernel.org ([198.145.29.99]:47524 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726183AbgEOXHl (ORCPT ); Fri, 15 May 2020 19:07:41 -0400 Received: from localhost (c-73-47-72-35.hsd1.nh.comcast.net [73.47.72.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPSA id 54ACA205CB; Fri, 15 May 2020 23:07:41 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1589584061; bh=vz66ht54cMc3RYpWc41W0EyO97eRJNrUFQiUdZuTX8Q=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=ujca5DMsp5Ik4R1EtDjzKw0mhCv7WrtoYDRjqs8b0TI8lUUM8G7qPe/H4xd4N5O6X 96zYkBHO3RrHizOqBG4L9Y1HqKjiW8woLZdB34jcoLQS4XbP2i6JwBmVx4oU3uajml koXsISBbdfq/IR/lpp7X5NoGZQxP5tTjFiiI+p9o= Date: Fri, 15 May 2020 19:07:40 -0400 From: Sasha Levin To: Andi Kleen Cc: Jarkko Sakkinen , linux-kernel@vger.kernel.org, tglx@linutronix.de, bp@alien8.de, luto@kernel.org, hpa@zytor.com, dave.hansen@intel.com, tony.luck@intel.com, ravi.v.shankar@intel.com, chang.seok.bae@intel.com Subject: Re: [PATCH v12 00/18] Enable FSGSBASE instructions Message-ID: <20200515230740.GG29995@sasha-vm> References: <20200511045311.4785-1-sashal@kernel.org> <0186c22a8a6be1516df0703c421faaa581041774.camel@linux.intel.com> <20200515164013.GF29995@sasha-vm> <20200515175550.GP3538@tassilo.jf.intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline In-Reply-To: <20200515175550.GP3538@tassilo.jf.intel.com> User-Agent: Mutt/1.10.1 (2018-07-13) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, May 15, 2020 at 10:55:50AM -0700, Andi Kleen wrote: >> Indeed, we've seen a few hacks that basically just enable FSGSBASE: >> >> - https://github.com/oscarlab/graphene-sgx-driver >> - https://github.com/occlum/enable_rdfsbase >> >> And would very much like to get rid of them... > >These are insecure and open root holes without the patches >used here. It's sad that these hacks are being used alongside SGX on "secure" systems. -- Thanks, Sasha