[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 00/65] x86: Support for CET Indirect Branch Tracking


  • To: Andrew Cooper <amc96@xxxxxxxx>, Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  • From: Jan Beulich <jbeulich@xxxxxxxx>
  • Date: Mon, 29 Nov 2021 10:18:53 +0100
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=suse.com; dmarc=pass action=none header.from=suse.com; dkim=pass header.d=suse.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=7gb/fQR0I8QmRGQLMxQhmqOlVFGZxl/0ilDaPbMba7Q=; b=izwRi6Q9C2FCTxb9Laoe2twjXNszx7MeXlC24O4a1l5UKZk68iZAV6Prd/p09PBpa0ouZF1+j/FhMpa/yoISx4kzSzSuMz0EU3biMa+m+NkYY2SsZmIDDI1LLA9xTE26szU5z+vLidyKE1DxA/B8MraeHP2Pli8n7exKKcUDT6omvjwn1iXIcrb9HIL7w0oURaQLV460N6ki5Uh5YnNNGtKKeSzPpBTYWXaSMZUaTJ4TerdbLP3BvsvxKBSH8uGXhp0zUkUKU7X6x08bCBGGiRmQbnVTmmjtksrEtrcAmKms6EvHlJYFGqQ88UA9u4Nz8m6kq8p2eJ3XOhzzBIagMA==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MSfO8FREKojO3s8zT1RbY3HxGFWnVQqVOv1DAD7lJXkJE1lzCx/6kVzIfzTgjhzzmOHk9U6yrphPvH3r9zefjyAI9KfbwElkp4l7S1p+dovEF76vpcivYI0mY7raGIfW0kR8I6DDJW2MYfDRS09eK3hej6JSwDZqIZ/a5txo3RTSFEWoK84SYgTdyxGLt4G1YRecy7dzColAHrrMEeHaj254uQ0MCet77pSif8dbtKpTGf4tOZNaykqmu9EpbFVeXg4R5yYLqLGudKiBJ5wc8m6XQxCdYMooZLhMpLeVnCHz3TV5/AlDxgb/QMIGomLziV1i12T5Z9pc7D4WmRCmeQ==
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=suse.com;
  • Cc: Stefano Stabellini <sstabellini@xxxxxxxxxx>, Wei Liu <wl@xxxxxxx>, Julien Grall <julien@xxxxxxx>, Roger Pau Monné <roger.pau@xxxxxxxxxx>, Juergen Gross <jgross@xxxxxxxx>, Daniel Smith <dpsmith@xxxxxxxxxxxxxxxxxxxx>, Marek Marczykowski-Górecki <marmarek@xxxxxxxxxxxxxxxxxxxxxx>, Xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • Delivery-date: Mon, 29 Nov 2021 09:19:08 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On 27.11.2021 00:49, Andrew Cooper wrote:
> Given that Marek has kindly hacked us up a check which should find any
> arbitrary violations, and on a small sample of builds, there are no
> violations, I suggest that we clean it up and put it as a check in the
> real build and enable it by default seeing as we're right at the start
> of the 4.17 dev window.
> 
> If it is seen to trip (and it might well not), we can judge at that
> point whether to rearrange the code to avoid it, or drop the check. 
> Until then however, it gives us a very strong security statement.

Sounds like a plan.

Jan




 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.