# git rev-parse -q --verify cb42033f5d172b5779b6c8301c65693ff6a0a778^{commit} cb42033f5d172b5779b6c8301c65693ff6a0a778 already have revision, skipping fetch # git checkout -q -f -B kisskb cb42033f5d172b5779b6c8301c65693ff6a0a778 # git clean -qxdf # < git log -1 # commit cb42033f5d172b5779b6c8301c65693ff6a0a778 # Author: Christophe Leroy # Date: Mon Mar 11 08:30:38 2019 +0000 # # powerpc/32s: Implement Kernel Userspace Access Protection # # This patch implements Kernel Userspace Access Protection for # book3s/32. # # Due to limitations of the processor page protection capabilities, # the protection is only against writing. read protection cannot be # achieved using page protection. # # The previous patch modifies the page protection so that RW user # pages are RW for Key 0 and RO for Key 1, and it sets Key 0 for # both user and kernel. # # This patch changes userspace segment registers are set to Ku 0 # and Ks 1. When kernel needs to write to RW pages, the associated # segment register is then changed to Ks 0 in order to allow write # access to the kernel. # # In order to avoid having the read all segment registers when # locking/unlocking the access, some data is kept in the thread_struct # and saved on stack on exceptions. The field identifies both the # first unlocked segment and the first segment following the last # unlocked one. When no segment is unlocked, it contains value 0. # # As the hash_page() function is not able to easily determine if a # protfault is due to a bad kernel access to userspace, protfaults # need to be handled by handle_page_fault when KUAP is set. # # Signed-off-by: Christophe Leroy # [mpe: Drop allow_read/write_to/from_user() as they're now in kup.h, # and adapt allow_user_access() to do nothing when to == NULL] # Signed-off-by: Michael Ellerman # < /opt/cross/kisskb/arcompact-buildroot-2015.08.1/bin/arc-buildroot-linux-uclibc-gcc --version # < /opt/cross/kisskb/arcompact-buildroot-2015.08.1/bin/arc-buildroot-linux-uclibc-ld --version # < git log --format=%s --max-count=1 cb42033f5d172b5779b6c8301c65693ff6a0a778 # < make -s -j 120 ARCH=arc O=/kisskb/build/mpe_axs101_defconfig_arcompact CROSS_COMPILE=/opt/cross/kisskb/arcompact-buildroot-2015.08.1/bin/arc-buildroot-linux-uclibc- axs101_defconfig # Added to kconfig CONFIG_INITRAMFS_SOURCE="" # yes \n | make -s -j 120 ARCH=arc O=/kisskb/build/mpe_axs101_defconfig_arcompact CROSS_COMPILE=/opt/cross/kisskb/arcompact-buildroot-2015.08.1/bin/arc-buildroot-linux-uclibc- oldconfig yes: standard output: Broken pipe # make -s -j 120 ARCH=arc O=/kisskb/build/mpe_axs101_defconfig_arcompact CROSS_COMPILE=/opt/cross/kisskb/arcompact-buildroot-2015.08.1/bin/arc-buildroot-linux-uclibc- /kisskb/src/arch/arc/mm/tlb.c: In function 'do_tlb_overlap_fault': /kisskb/src/arch/arc/mm/tlb.c:914:2: warning: variable length array 'pd0' is used [-Wvla] unsigned int pd0[mmu->ways]; ^ In file included from /kisskb/src/arch/arc/include/asm/atomic.h:16:0, from /kisskb/src/include/linux/atomic.h:7, from /kisskb/src/include/asm-generic/bitops/lock.h:5, from /kisskb/src/arch/arc/include/asm/bitops.h:429, from /kisskb/src/include/linux/bitops.h:19, from /kisskb/src/include/linux/kernel.h:12, from /kisskb/src/include/linux/list.h:9, from /kisskb/src/include/linux/wait.h:7, from /kisskb/src/include/linux/wait_bit.h:8, from /kisskb/src/include/linux/fs.h:6, from /kisskb/src/fs/nfs/nfs3acl.c:2: /kisskb/src/fs/nfs/nfs3acl.c: In function 'nfs3_abort_get_acl': /kisskb/src/arch/arc/include/asm/cmpxchg.h:95:29: warning: value computed is not used [-Wunused-value] #define cmpxchg(ptr, o, n) ((typeof(*(ptr)))__cmpxchg((ptr), \ ^ /kisskb/src/fs/nfs/nfs3acl.c:44:2: note: in expansion of macro 'cmpxchg' cmpxchg(p, sentinel, ACL_NOT_CACHED); ^ In file included from /kisskb/src/arch/arc/include/asm/atomic.h:16:0, from /kisskb/src/include/linux/atomic.h:7, from /kisskb/src/include/asm-generic/bitops/lock.h:5, from /kisskb/src/arch/arc/include/asm/bitops.h:429, from /kisskb/src/include/linux/bitops.h:19, from /kisskb/src/include/linux/kernel.h:12, from /kisskb/src/include/linux/list.h:9, from /kisskb/src/include/linux/module.h:9, from /kisskb/src/net/core/filter.c:24: /kisskb/src/net/core/filter.c: In function 'bpf_clear_redirect_map': /kisskb/src/arch/arc/include/asm/cmpxchg.h:95:29: warning: value computed is not used [-Wunused-value] #define cmpxchg(ptr, o, n) ((typeof(*(ptr)))__cmpxchg((ptr), \ ^ /kisskb/src/net/core/filter.c:3479:4: note: in expansion of macro 'cmpxchg' cmpxchg(&ri->map, map, NULL); ^ In file included from /kisskb/src/arch/arc/include/asm/atomic.h:16:0, from /kisskb/src/include/linux/atomic.h:7, from /kisskb/src/include/asm-generic/bitops/lock.h:5, from /kisskb/src/arch/arc/include/asm/bitops.h:429, from /kisskb/src/include/linux/bitops.h:19, from /kisskb/src/include/linux/kernel.h:12, from /kisskb/src/fs/posix_acl.c:13: /kisskb/src/fs/posix_acl.c: In function 'get_acl': /kisskb/src/arch/arc/include/asm/cmpxchg.h:95:29: warning: value computed is not used [-Wunused-value] #define cmpxchg(ptr, o, n) ((typeof(*(ptr)))__cmpxchg((ptr), \ ^ /kisskb/src/fs/posix_acl.c:147:3: note: in expansion of macro 'cmpxchg' cmpxchg(p, sentinel, ACL_NOT_CACHED); ^ /kisskb/src/net/ipv4/tcp_input.c: In function 'tcp_data_queue': /kisskb/src/net/ipv4/tcp_input.c:4315:49: warning: array subscript is above array bounds [-Warray-bounds] tp->selective_acks[i-1] = tp->selective_acks[i]; ^ Completed OK # rm -rf /kisskb/build/mpe_axs101_defconfig_arcompact # Build took: 0:00:32.950207