Received: by 2002:a05:6358:11c7:b0:104:8066:f915 with SMTP id i7csp919330rwl; Wed, 5 Apr 2023 09:20:02 -0700 (PDT) X-Google-Smtp-Source: AKy350ZzpXZudTYVtL6CJs+RfAb1Dv/uR0MsUk23yEFw0GRuvjHuX28EmWfuxXTZ5D9jN6xAun7B X-Received: by 2002:aa7:d9cc:0:b0:502:45e7:4139 with SMTP id v12-20020aa7d9cc000000b0050245e74139mr2082501eds.37.1680711601888; Wed, 05 Apr 2023 09:20:01 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1680711601; cv=none; d=google.com; s=arc-20160816; b=glHUEgpOCOLLJiE1rBmBZtc5CkqJyHpJZHp991e+MqnsPCyjoo+k5hFXlDMD5EE1kZ b6DLqkkqWBXNc8ERMTmTN2MLGBLge1dRexJa9MNjIdLkj/rBMscQpTtGvTZoVprpIK/M oYUWsN34faFvaTJB/hyAIZzzzBSR4UoAB6nugVURSwdWbelyI9EDUXDhdSzZfo4tJNDC 6ME3UWQT7NprVuJwbV7X+vVccTho26VG/4zX0ftCRdbyQ36VaHdcjVLyAt9u7s2ifXeX VGfye1kMMIZmUfSmUOXS7gs8IndkYbWM/YLmHFOFH5VBxlgyReoC67AIpPw1qJJBG55V 78cQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=pkmewBtVUuj1GupUaGo/aeGQOsh5X5V6VVHDAZE0b9c=; b=QNFuJ9vkp427L5MVna0mkePj7iJEWnjlIYyZXKbHNxDRfHqS135QozbLBTVg+7knbu zUzxZo0A1aLX6gh0ojfiFL7C5GShbpQ86dKHyHuy95iy/oQjy4+LPaV7GGScXT51cozQ JifwII44/uCmLIlIAyanrOaSBJXMBpiiSzmodDrLqQlj1CkS7QBMR5/93HyECqEkGUvJ RhIyr3BWSxQQRs8A2/quVjEEiMslXrfXc73+hGtfB5HIVbvVQEY0Aa4QAiUweVLoR9mx i0VoYegzAWQVkzEigE8CQVzUcSidV7NEQgDB7fB3SXSH1+mzUMmc6aUfTMfgsSaCwwHM tCpw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@alien8.de header.s=dkim header.b=YSOrnjyt; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=alien8.de Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id l18-20020aa7c312000000b005021d78df8dsi2108493edq.540.2023.04.05.09.19.35; Wed, 05 Apr 2023 09:20:01 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@alien8.de header.s=dkim header.b=YSOrnjyt; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=alien8.de Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232244AbjDEQSK (ORCPT + 99 others); Wed, 5 Apr 2023 12:18:10 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:44656 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229446AbjDEQR4 (ORCPT ); Wed, 5 Apr 2023 12:17:56 -0400 Received: from mail.skyhub.de (mail.skyhub.de [IPv6:2a01:4f8:190:11c2::b:1457]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id BE2DC7A8D; Wed, 5 Apr 2023 09:17:22 -0700 (PDT) Received: from zn.tnic (p5de8e687.dip0.t-ipconnect.de [93.232.230.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.skyhub.de (SuperMail on ZX Spectrum 128k) with ESMTPSA id C9AA41EC0104; Wed, 5 Apr 2023 18:17:18 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alien8.de; s=dkim; t=1680711438; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:in-reply-to:in-reply-to: references:references; bh=pkmewBtVUuj1GupUaGo/aeGQOsh5X5V6VVHDAZE0b9c=; b=YSOrnjytoNbMZ8AhY5Lq9ZDtp1RlA/CQoyBW4bieV8zO0OgoeH8KbIj1MhdO4rEs3qIBWB CHRm6aOs+txfnnZwubIDkF8SoyjQj/cJO8sjA3aFVHCphkkuDx6sqayIKLvwNIMhc2SECt t9M0/f4z1TKZRwNxv51xoNyEvNdMYRY= Date: Wed, 5 Apr 2023 18:17:14 +0200 From: Borislav Petkov To: Peter Jones Cc: Andy Lutomirski , Evgeniy Baskov , Ard Biesheuvel , Dave Hansen , Ingo Molnar , "Peter Zijlstra (Intel)" , Thomas Gleixner , Alexey Khoroshilov , Gerd Hoffmann , "Limonciello, Mario" , joeyli , lvc-project@linuxtesting.org, the arch/x86 maintainers , linux-efi@vger.kernel.org, Linux Kernel Mailing List , linux-hardening@vger.kernel.org Subject: Re: [PATCH v5 00/27] x86_64: Improvements at compressed kernel stage Message-ID: <20230405161714.GCZC2fCg0SrV5v9LZg@fat_crate.local> References: <8493680a-0bad-43de-a7a0-caa48e430139@uncooperative.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <8493680a-0bad-43de-a7a0-caa48e430139@uncooperative.org> X-Spam-Status: No, score=-0.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Mar 15, 2023 at 01:57:33PM -0400, Peter Jones wrote: > Currently I think the only shipping systems that implement > NX-requirements are from Microsoft - the Surface product line and > Windows Dev Kit - and they don't allow you to disable it at all. Other > vendors have produced firmware that isn't shipping yet (I *think*) that > has it as a setting in the firmware menu, and they're looking to move to > enabling it by default on some product lines. I hope they realize that they must leave the off switch in the BIOS for older kernels... -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette