Received: by 2002:a05:6a10:af89:0:0:0:0 with SMTP id iu9csp535854pxb; Fri, 28 Jan 2022 04:51:51 -0800 (PST) X-Google-Smtp-Source: ABdhPJzKiBn/ToJOXkVmQq0Rv+FSlQgQGX3xhyX4W93yL6W/TinmO/XXqE/Yue2sXeSDMZs9q78T X-Received: by 2002:aa7:d553:: with SMTP id u19mr8252343edr.298.1643374311399; Fri, 28 Jan 2022 04:51:51 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1643374311; cv=none; d=google.com; s=arc-20160816; b=VCOl74IlanUDUKYKdQ9ZiZw3WJhwGnrfC8+Xj9DHLnwKz9QdiH7BTfP95seayNxKwp KbWKfYYNa1q/Qdg4M8jhBcLNgC60qBMBOKB5oDCTZWLKwkZGLnWOwPbfwtG2hGT9qSNP z2HT/68I7KUmaj3yncTM4JCFJwRD+nvYYPFKadoQPgGJQocRNUq2avOVmphJiVtNzgD/ 4EIOFxUNS5LDPj9fAHGR0zKK2XcOuqE+80t6kv/W6sQFOV1C2/DJsiOegxH9QNG/aS95 qJ33T2SnVvSdWcCPVQfWxYC3pKZeT+QAzKr3/IvAIqapa6eAH4iKP5x5wCSDZOmg4oXF AaEQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=WncK0Bp8tfeGVvWhAs5g3D1BmqkzIDB6zKgpgQwC45E=; b=SHENThKlQ1ML/K8aGChXayHgFPqkzkxWg5kwbGRO6nCnT75m71fzAR4tRSdlHVDblD jopWJQgqNeYpJqUyIxyA9n/vRXofV9yAfWPAvIsCzNuhe069Ge2jyUSTsCbOXsUoQVai Rb8s3knyvhwvOuk/eGWdjg4MXsTdepoWHBZ1JYvbTf04D9u6h64GKsLbi9v6ersFB6g2 Feti6SCRnTw8KovXDwUeKLf9GFEZaMcjM16wuu5SahHeXd78CQ8cAeoh0WvZSJSQMy5d b/T+aAiuBVwDTdcD/wohh16R21lW8nFzglSNexqvK2eF+rQ1GjERYg2fqjnlYb19k7wu PdAw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=d28gKUVF; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id en5si2796687edb.335.2022.01.28.04.51.26; Fri, 28 Jan 2022 04:51:51 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=d28gKUVF; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S245030AbiA0Rzx (ORCPT + 99 others); Thu, 27 Jan 2022 12:55:53 -0500 Received: from mga12.intel.com ([192.55.52.136]:65467 "EHLO mga12.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S234701AbiA0RzQ (ORCPT ); Thu, 27 Jan 2022 12:55:16 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1643306116; x=1674842116; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=4Ac1mcQc1akR3aUY9wZB+gyhGRgjCgtM/2Y+XW9W564=; b=d28gKUVFXMFIEAn9BU42zmVFQCK2Tq22jeIM/6OsMLYqQTIvL0ZSD0t5 UiNLg909+ZR14OtXH7RYqXyMV4LUJjscwPEQjOH8dJM0DzNR+gTaIXglZ 3kN+lREB5X2QuEVdeD6O4+Hy/EVr4ivJpmyk74XoEdQAe/33vY7YAnKlc qgcRxJDJ13FtltYqIHvq9uBxVCPhV8GJN7XVAlCqvZppG9XImCXkHe+Q/ zYUS4TF4MREbMd0jr60HSIz7nEKsIGVFcHCJZLrQcSaVnmPJJ/j8OcJfj ELt6YGEAiDjdx7d2tKYynj7vwuDfCwcl5zcnyBhyldhXFAnHerwD4GKst w==; X-IronPort-AV: E=McAfee;i="6200,9189,10239"; a="226899122" X-IronPort-AV: E=Sophos;i="5.88,321,1635231600"; d="scan'208";a="226899122" Received: from fmsmga001.fm.intel.com ([10.253.24.23]) by fmsmga106.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 27 Jan 2022 09:55:08 -0800 X-IronPort-AV: E=Sophos;i="5.88,321,1635231600"; d="scan'208";a="674796065" Received: from iweiny-desk2.sc.intel.com (HELO localhost) ([10.3.52.147]) by fmsmga001-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 27 Jan 2022 09:55:08 -0800 From: ira.weiny@intel.com To: Dave Hansen , "H. Peter Anvin" , Dan Williams Cc: Ira Weiny , Fenghua Yu , Rick Edgecombe , linux-kernel@vger.kernel.org Subject: [PATCH V8 07/44] x86/pkeys: Add PKS CPU feature bit Date: Thu, 27 Jan 2022 09:54:28 -0800 Message-Id: <20220127175505.851391-8-ira.weiny@intel.com> X-Mailer: git-send-email 2.31.1 In-Reply-To: <20220127175505.851391-1-ira.weiny@intel.com> References: <20220127175505.851391-1-ira.weiny@intel.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Ira Weiny Protection Keys for Supervisor pages (PKS) enables fast, hardware thread specific, manipulation of permission restrictions on supervisor page mappings. It uses the same mechanism of Protection Keys as those on User mappings but applies that mechanism to supervisor mappings using a supervisor specific MSR. The CPU indicates support for PKS in bit 31 of the ECX register after a cpuid instruction. Add the defines for this bit and the boilerplate disable infrastructure predicated on the Kconfig option. Signed-off-by: Ira Weiny --- Changes for V8 Split this out into it's own patch --- arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/disabled-features.h | 8 +++++++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/arch/x86/include/asm/cpufeatures.h b/arch/x86/include/asm/cpufeatures.h index 6db4e2932b3d..b917605e9915 100644 --- a/arch/x86/include/asm/cpufeatures.h +++ b/arch/x86/include/asm/cpufeatures.h @@ -370,6 +370,7 @@ #define X86_FEATURE_MOVDIR64B (16*32+28) /* MOVDIR64B instruction */ #define X86_FEATURE_ENQCMD (16*32+29) /* ENQCMD and ENQCMDS instructions */ #define X86_FEATURE_SGX_LC (16*32+30) /* Software Guard Extensions Launch Control */ +#define X86_FEATURE_PKS (16*32+31) /* Protection Keys for Supervisor pages */ /* AMD-defined CPU features, CPUID level 0x80000007 (EBX), word 17 */ #define X86_FEATURE_OVERFLOW_RECOV (17*32+ 0) /* MCA overflow recovery support */ diff --git a/arch/x86/include/asm/disabled-features.h b/arch/x86/include/asm/disabled-features.h index 8f28fafa98b3..66fdad8f3941 100644 --- a/arch/x86/include/asm/disabled-features.h +++ b/arch/x86/include/asm/disabled-features.h @@ -44,6 +44,12 @@ # define DISABLE_OSPKE (1<<(X86_FEATURE_OSPKE & 31)) #endif /* CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS */ +#ifdef CONFIG_ARCH_ENABLE_SUPERVISOR_PKEYS +# define DISABLE_PKS 0 +#else +# define DISABLE_PKS (1<<(X86_FEATURE_PKS & 31)) +#endif + #ifdef CONFIG_X86_5LEVEL # define DISABLE_LA57 0 #else @@ -85,7 +91,7 @@ #define DISABLED_MASK14 0 #define DISABLED_MASK15 0 #define DISABLED_MASK16 (DISABLE_PKU|DISABLE_OSPKE|DISABLE_LA57|DISABLE_UMIP| \ - DISABLE_ENQCMD) + DISABLE_ENQCMD|DISABLE_PKS) #define DISABLED_MASK17 0 #define DISABLED_MASK18 0 #define DISABLED_MASK19 0 -- 2.31.1