Re: [PATCH v19 20/25] x86/cet/shstk: User-mode shadow stack support

[PATCH v19 00/25] Control-flow Enforcement: Shadow Stack · Yu-cheng Yu <hidden> · 2021-02-03
[PATCH v19 03/25] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 03/25] x86/cpufeatures: Add CET CPU feature flags for Control-flow Enforcement Technology (CET) · Kees Cook <hidden> · 2021-02-04
[PATCH v19 02/25] x86/cet/shstk: Add Kconfig option for user-mode control-flow protection · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 02/25] x86/cet/shstk: Add Kconfig option for user-mode control-flow protection · Kees Cook <hidden> · 2021-02-04
Re: [PATCH v19 02/25] x86/cet/shstk: Add Kconfig option for user-mode control-flow protection · Yu, Yu-cheng <hidden> · 2021-02-05
[PATCH v19 06/25] x86/cet: Add control-protection fault handler · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Kees Cook <hidden> · 2021-02-04
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Yu, Yu-cheng <hidden> · 2021-02-05
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Borislav Petkov <bp@alien8.de> · 2021-02-05
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Yu, Yu-cheng <hidden> · 2021-02-05
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Kees Cook <hidden> · 2021-02-05
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Borislav Petkov <bp@alien8.de> · 2021-02-08
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Yu, Yu-cheng <hidden> · 2021-02-08
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Borislav Petkov <bp@alien8.de> · 2021-02-08
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Yu, Yu-cheng <hidden> · 2021-02-08
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Borislav Petkov <bp@alien8.de> · 2021-02-08
Re: [PATCH v19 06/25] x86/cet: Add control-protection fault handler · Yu, Yu-cheng <hidden> · 2021-02-08
[PATCH v19 07/25] x86/mm: Remove _PAGE_DIRTY from kernel RO pages · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 07/25] x86/mm: Remove _PAGE_DIRTY from kernel RO pages · Kees Cook <hidden> · 2021-02-04
[PATCH v19 08/25] x86/mm: Introduce _PAGE_COW · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 08/25] x86/mm: Introduce _PAGE_COW · Kees Cook <hidden> · 2021-02-04
Re: [PATCH v19 08/25] x86/mm: Introduce _PAGE_COW · Dave Hansen <hidden> · 2021-02-04
Re: [PATCH v19 08/25] x86/mm: Introduce _PAGE_COW · Yu, Yu-cheng <hidden> · 2021-02-05
Re: [PATCH v19 08/25] x86/mm: Introduce _PAGE_COW · Yu, Yu-cheng <hidden> · 2021-02-08
Re: [PATCH v19 08/25] x86/mm: Introduce _PAGE_COW · Yu, Yu-cheng <hidden> · 2021-02-05
[PATCH v19 10/25] x86/mm: Update pte_modify for _PAGE_COW · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 10/25] x86/mm: Update pte_modify for _PAGE_COW · Kees Cook <hidden> · 2021-02-04
[PATCH v19 13/25] x86/mm: Shadow Stack page fault error checking · Yu-cheng Yu <hidden> · 2021-02-03
[PATCH v19 11/25] x86/mm: Update ptep_set_wrprotect() and pmdp_set_wrprotect() for transition from _PAGE_DIRTY to _PAGE_COW · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 11/25] x86/mm: Update ptep_set_wrprotect() and pmdp_set_wrprotect() for transition from _PAGE_DIRTY to _PAGE_COW · Kees Cook <hidden> · 2021-02-04
[PATCH v19 12/25] mm: Introduce VM_SHSTK for shadow stack memory · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 12/25] mm: Introduce VM_SHSTK for shadow stack memory · Cyrill Gorcunov <hidden> · 2021-02-04
Re: [PATCH v19 12/25] mm: Introduce VM_SHSTK for shadow stack memory · Yu, Yu-cheng <hidden> · 2021-02-04
[PATCH v19 17/25] mm/mmap: Add shadow stack pages to memory accounting · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 17/25] mm/mmap: Add shadow stack pages to memory accounting · Kees Cook <hidden> · 2021-02-04
[PATCH v19 15/25] mm: Fixup places that call pte_mkwrite() directly · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 15/25] mm: Fixup places that call pte_mkwrite() directly · Kees Cook <hidden> · 2021-02-04
[PATCH v19 19/25] mm: Re-introduce vm_flags to do_mmap() · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 19/25] mm: Re-introduce vm_flags to do_mmap() · Kees Cook <hidden> · 2021-02-04
[PATCH v19 20/25] x86/cet/shstk: User-mode shadow stack support · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 20/25] x86/cet/shstk: User-mode shadow stack support · Kees Cook <hidden> · 2021-02-04
[PATCH v19 21/25] x86/cet/shstk: Handle signals for shadow stack · Yu-cheng Yu <hidden> · 2021-02-03
[PATCH v19 25/25] mm: Introduce PROT_SHSTK for shadow stack · Yu-cheng Yu <hidden> · 2021-02-03
[PATCH v19 24/25] x86/cet/shstk: Add arch_prctl functions for shadow stack · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 24/25] x86/cet/shstk: Add arch_prctl functions for shadow stack · Kees Cook <hidden> · 2021-02-04
Re: [PATCH v19 24/25] x86/cet/shstk: Add arch_prctl functions for shadow stack · Yu, Yu-cheng <hidden> · 2021-02-04
Re: [PATCH v19 24/25] x86/cet/shstk: Add arch_prctl functions for shadow stack · Kees Cook <hidden> · 2021-02-05
[PATCH v19 22/25] ELF: Introduce arch_setup_elf_property() · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 22/25] ELF: Introduce arch_setup_elf_property() · Kees Cook <hidden> · 2021-02-04
[PATCH v19 23/25] x86/cet/shstk: Handle thread shadow stack · Yu-cheng Yu <hidden> · 2021-02-03
[PATCH v19 18/25] mm: Update can_follow_write_pte() for shadow stack · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 18/25] mm: Update can_follow_write_pte() for shadow stack · Kees Cook <hidden> · 2021-02-04
[PATCH v19 04/25] x86/cpufeatures: Introduce X86_FEATURE_CET and setup functions · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 04/25] x86/cpufeatures: Introduce X86_FEATURE_CET and setup functions · Kees Cook <hidden> · 2021-02-04
Re: [PATCH v19 04/25] x86/cpufeatures: Introduce X86_FEATURE_CET and setup functions · Borislav Petkov <bp@alien8.de> · 2021-02-05
Re: [PATCH v19 04/25] x86/cpufeatures: Introduce X86_FEATURE_CET and setup functions · Yu, Yu-cheng <hidden> · 2021-02-05
[PATCH v19 16/25] mm: Add guard pages around a shadow stack. · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 16/25] mm: Add guard pages around a shadow stack. · Kees Cook <hidden> · 2021-02-04
[PATCH v19 14/25] x86/mm: Update maybe_mkwrite() for shadow stack · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 14/25] x86/mm: Update maybe_mkwrite() for shadow stack · Kees Cook <hidden> · 2021-02-04
[PATCH v19 09/25] drm/i915/gvt: Change _PAGE_DIRTY to _PAGE_DIRTY_BITS · Yu-cheng Yu <hidden> · 2021-02-03
[PATCH v19 05/25] x86/fpu/xstate: Introduce CET MSR and XSAVES supervisor states · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 05/25] x86/fpu/xstate: Introduce CET MSR and XSAVES supervisor states · Kees Cook <hidden> · 2021-02-04
[PATCH v19 01/25] Documentation/x86: Add CET description · Yu-cheng Yu <hidden> · 2021-02-03
Re: [PATCH v19 01/25] Documentation/x86: Add CET description · Kees Cook <hidden> · 2021-02-04
Re: [PATCH v19 01/25] Documentation/x86: Add CET description · Yu, Yu-cheng <hidden> · 2021-02-04

From: Kees Cook <hidden>
Date: 2021-02-04 20:32:47
Also in: linux-api, linux-doc, linux-mm, lkml

On Wed, Feb 03, 2021 at 02:55:42PM -0800, Yu-cheng Yu wrote:

Introduce basic shadow stack enabling/disabling/allocation routines.
A task's shadow stack is allocated from memory with VM_SHSTK flag and has
a fixed size of min(RLIMIT_STACK, 4GB).

Signed-off-by: Yu-cheng Yu <redacted>

Reviewed-by: Kees Cook <redacted>

-- 
Kees Cook

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help