diff options
| author | Quentin Perret <qperret@google.com> | 2021-08-09 16:24:47 +0100 |
|---|---|---|
| committer | Marc Zyngier <maz@kernel.org> | 2021-08-11 11:39:52 +0100 |
| commit | 66c57edd3bc79e3527daaae8123f72ecd1e3fa25 (patch) | |
| tree | 1643a55ee0aeee2d0a2de38ced7792db0d2a66c1 /arch/arm64/kvm/hyp/nvhe/timer-sr.c | |
| parent | f9370010e92638f66473baf342e19de940403362 (diff) | |
KVM: arm64: Restrict EL2 stage-1 changes in protected mode
The host kernel is currently able to change EL2 stage-1 mappings without
restrictions thanks to the __pkvm_create_mappings() hypercall. But in a
world where the host is no longer part of the TCB, this clearly poses a
problem.
To fix this, introduce a new hypercall to allow the host to share a
physical memory page with the hypervisor, and remove the
__pkvm_create_mappings() variant. The new hypercall implements
ownership and permission checks before allowing the sharing operation,
and it annotates the shared page in the hypervisor stage-1 and host
stage-2 page-tables.
Signed-off-by: Quentin Perret <qperret@google.com>
Reviewed-by: Fuad Tabba <tabba@google.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20210809152448.1810400-21-qperret@google.com
Diffstat (limited to 'arch/arm64/kvm/hyp/nvhe/timer-sr.c')
0 files changed, 0 insertions, 0 deletions