Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
From:   Christophe Leroy <christophe.leroy@csgroup.eu>
To:     Benjamin Herrenschmidt <benh@kernel.crashing.org>,
        Paul Mackerras <paulus@samba.org>,
        Michael Ellerman <mpe@ellerman.id.au>
CC:     Christophe Leroy <christophe.leroy@csgroup.eu>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "linuxppc-dev@lists.ozlabs.org" <linuxppc-dev@lists.ozlabs.org>
Subject: [PATCH] powerpc/32s: Enable STRICT_MODULE_RWX for the 603 core
Thread-Topic: [PATCH] powerpc/32s: Enable STRICT_MODULE_RWX for the 603 core
Thread-Index: AQHYC4nrAjqfbFaQXE6sowexREg9UA==
Date:   Mon, 17 Jan 2022 10:06:39 +0000
Message-ID: <1e6162f334167e75f1140082932e3a354b16daba.1642413973.git.christophe.leroy@csgroup.eu>
Accept-Language: fr-FR, en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?MzpRRgqZp9vZnyHhx8uzP7wcuYg4Hz4RT8wF9iGpGvP8VdKaxp6m7Cg6Ym?=
 =?iso-8859-1?Q?OEMxo7S3W4ozm/0VKmfmGXwmXTXsV2dQN1DSey44ZjQVmSxKgHCAjEr3gt?=
 =?iso-8859-1?Q?39pW8TDPgLynx6SOrfMe8yuUvb4VTs+phxfDUI0y7YjlGSYHCsQ/rrbu63?=
 =?iso-8859-1?Q?5TMPZ5AyEegPW+TDLgCqY+IiJR11biRFXX6PHKA+C+hdI1zpkpUr/9VW0V?=
 =?iso-8859-1?Q?A/th3PAJulLX4GzrptURhM/vm1gSnUcrlT2Wsc99q+MdYZXOmIUjWZAKdo?=
 =?iso-8859-1?Q?uF7hTe+qUmQPAbcEZbs1/S8wYAgAhav1JoCyCVhQyugMes2LyD5z/AeCuf?=
 =?iso-8859-1?Q?qWu4VdKk6bPOXmECJEMF5tJpwnKqIF3JQFTOcNZYfhU9hl0bW7ZWOduPJ/?=
 =?iso-8859-1?Q?MSzlI3HThzfUI1VYFzGxWyRsz+NZ+pFntoqyNNuahnWRjAeRaX9k2ad8uh?=
 =?iso-8859-1?Q?VZ8t3nJSD8VJtkp2jIXgKwK7gGwR0m3xgUeHacaez05ntbNxnp/Ko8VzDL?=
 =?iso-8859-1?Q?vKwu7j9trTUvIak3t1Jt0Itx3kBiTPdCRxofDnzUQyeBAzbvJfzzBfhKqg?=
 =?iso-8859-1?Q?6dty362pHgLRqyaKa+stycZ6J1d6TozuwtzK2xfm1RS2S/RCXp9KvR8HKl?=
 =?iso-8859-1?Q?fOM9J3MrWlC7CJxgA1Dwa0Q3YxMgXprUBiKk9nni7pHQ4N8R0iRxurM25w?=
 =?iso-8859-1?Q?XEPaFUvQcGSMIyFAakCV4ofi+gpaIzYhS4e7uooiUz/UvqVbpymM6aViQZ?=
 =?iso-8859-1?Q?/PazBQUDnAlNOnqcry/ilh+LqCankmW+oZDKPwH69lk909ij/dE4FQ+V/b?=
 =?iso-8859-1?Q?A9dRXh8cmgc1ZM489LJOr39slxtthtv4hH53YDQ4d0gNQdyQCoiT3bqb25?=
 =?iso-8859-1?Q?28e+UFZ4rmRZWSs9mRCPjab08HwcZbX0Ao2hzYB3h4BKOJjUHiWFtf+7DM?=
 =?iso-8859-1?Q?N0EJJ7dNpYph9WK7bTJKi9GfagWL4E7IQ4YI6npJMKqTySBa54mb/c+Rdp?=
 =?iso-8859-1?Q?ZCrEyxxrIrPv1bpZx6RwmPr/NsTfVhIsROnAYqtZ/1ICG5JwSQ+fdysZwv?=
 =?iso-8859-1?Q?xLpll0+GYdqaOOvN/2hmAJihKBYinXNaQ54nJ6T07nNeV+lJMW2mRsmzx4?=
 =?iso-8859-1?Q?t6oOzCKG7Muqfp5Ea7F/7Kv3jKw7mjbdFGmnOBG4KgFhsNCdXkqgP6DCBb?=
 =?iso-8859-1?Q?HpKQK22U2GTBsG+gMe7CmpKpTsfFj8en8NRp2VJl3Ac5wFaLI6CxzAy55U?=
 =?iso-8859-1?Q?0CyP2EyQRQkPXk/zQogrWxTKE9mlWpWkoOdrhJU54RRxNiwQ7d90tNsQy6?=
 =?iso-8859-1?Q?NEf/Yu1vLhGe+qrAJIbcvUi325fv8ZFco20tZw7ppDBqW4whe89R2xDhs7?=
 =?iso-8859-1?Q?bn0CE5PtXxTiLea+EtsArV/pj792NoeiW6MCAajNhj3V17e/jWqdvLvY5X?=
 =?iso-8859-1?Q?ERHquyhY8okfryToX5ECbDNfFWnMq9bR0bbIl8UjH31ALxXmhydsm7uX0T?=
 =?iso-8859-1?Q?qh9GnyERB5e614DbwQD43bJAqfjLbcb7nkZKYvEtEjDFeI/ki47/Xd6YzE?=
 =?iso-8859-1?Q?sB0gQpdz02KT0zcLuxH2yAk7E6AVlHpGQmuktwDjuAp2addFGI81a0G670?=
 =?iso-8859-1?Q?FWJ6EekBFiBvIc3Nvl9F9Lkgcu/9TGocTFC6GttUd2vM0n6/eizJ452I8s?=
 =?iso-8859-1?Q?Zj+5kfYeKaDehnaPId2bKFfOS1DCocGbNm96mbJQKFqBkoR8sg6pISrOc8?=
 =?iso-8859-1?Q?raF+Kssi15QCsB2H9maD02X9E=3D?=
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8BIT
MIME-Version: 1.0
X-OriginatorOrg: csgroup.eu
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MR1P264MB2980.FRAP264.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 4b73ff81-ffde-4df0-ee38-08d9d9a10da4
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2022 10:06:39.1191
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 9914def7-b676-4fda-8815-5d49fb3b45c8
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: RrNWxdVyAWKRWwMBMXNxxYbhJhL+7+gJ0n85np/REmjo/4RLSMHkGj+jnrcay0QfXLYWEz8TIkQ77fV5R4nbmwUPLHElgC2MKWdxTlMbS2w=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR0P264MB3625
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

The book3s/32 MMU doesn't support per page execution protection and
doesn't support RO protection for kernel pages.

However, on the 603 which implements software loaded TLBs, execution
protection is honored by the TLB Miss handler which doesn't load
Instruction TLB for non executable pages. And RO protection is
honored by clearing the C bit for RO pages, leading to DSI.

So on the 603, STRICT_MODULE_RWX is possible without much effort.
Don't disable STRICT_MODULE_RWX on book3s/32 and print a warning
in case STRICT_MODULE_RWX has been selected and the platform has
a Hardware HASH MMU.

Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
---
 arch/powerpc/Kconfig         | 2 +-
 arch/powerpc/mm/pgtable_32.c | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/arch/powerpc/Kconfig b/arch/powerpc/Kconfig
index 0631c9241af3..cabd26b2c103 100644
--- a/arch/powerpc/Kconfig
+++ b/arch/powerpc/Kconfig
@@ -140,7 +140,7 @@ config PPC
 	select ARCH_HAS_SET_MEMORY
 	select ARCH_HAS_STRICT_KERNEL_RWX	if (PPC_BOOK3S || PPC_8xx || 40x) && !HIBERNATION
 	select ARCH_HAS_STRICT_KERNEL_RWX	if FSL_BOOKE && !HIBERNATION && !RANDOMIZE_BASE
-	select ARCH_HAS_STRICT_MODULE_RWX	if ARCH_HAS_STRICT_KERNEL_RWX && !PPC_BOOK3S_32
+	select ARCH_HAS_STRICT_MODULE_RWX	if ARCH_HAS_STRICT_KERNEL_RWX
 	select ARCH_HAS_TICK_BROADCAST		if GENERIC_CLOCKEVENTS_BROADCAST
 	select ARCH_HAS_UACCESS_FLUSHCACHE
 	select ARCH_HAS_UBSAN_SANITIZE_ALL
diff --git a/arch/powerpc/mm/pgtable_32.c b/arch/powerpc/mm/pgtable_32.c
index f71ededdc02a..a56ade39dc68 100644
--- a/arch/powerpc/mm/pgtable_32.c
+++ b/arch/powerpc/mm/pgtable_32.c
@@ -148,6 +148,9 @@ void mark_rodata_ro(void)
 {
 	unsigned long numpages;
 
+	if (IS_ENABLED(CONFIG_STRICT_MODULE_RWX) && mmu_has_feature(MMU_FTR_HPTE_TABLE))
+		pr_warn("This platform has HASH MMU, STRICT_MODULE_RWX won't work\n");
+
 	if (v_block_mapped((unsigned long)_stext + 1)) {
 		mmu_mark_rodata_ro();
 		ptdump_check_wx();
-- 
2.33.1