On Thu, 2022-11-17 at 12:25 +0000, Schimpe, Christina wrote:
quoted
Hmm, we definitely need to be able to set the SSP. Christina, does
GDB need
anything else? I thought maybe toggling SHSTK_EN?
In addition to the SSP, we want to write the CET state. For instance
for inferior calls,
we want to reset the IBT bits.
However, we won't write states that are disallowed by HW.
Sorry, I should have given more background. Peter is saying we should
split the ptrace interface so that shadow stack and IBT are separate.
They would also no longer necessarily mirror the CET_U MSR format.
Instead the kernel would expose a kernel specific format that has the
needed bits of shadow stack support. And a separate one later for IBT.
So the question is what does shadow stack need to support for ptrace
besides SSP? Is it only SSP? The other features are SHSTK_EN and
WRSS_EN. It might actually be nice to keep how these bits get flipped
more controlled (remove them from ptrace). It looks like CRIU didn't
need them.