Re: [PATCH v5 01/39] Documentation/x86: Add CET shadow stack description

[PATCH v5 00/39] Shadow stacks for userspace · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 04/39] x86/cpufeatures: Enable CET CR4 bit for shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 04/39] x86/cpufeatures: Enable CET CR4 bit for shadow stack · Kees Cook <hidden> · 2023-01-20
[PATCH v5 05/39] x86/fpu/xstate: Introduce CET MSR and XSAVES supervisor states · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 05/39] x86/fpu/xstate: Introduce CET MSR and XSAVES supervisor states · Kees Cook <hidden> · 2023-01-20
[PATCH v5 06/39] x86/fpu: Add helper for modifying xstate · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 06/39] x86/fpu: Add helper for modifying xstate · Kees Cook <hidden> · 2023-01-20
Re: [PATCH v5 06/39] x86/fpu: Add helper for modifying xstate · Borislav Petkov <bp@alien8.de> · 2023-02-01
Re: [PATCH v5 06/39] x86/fpu: Add helper for modifying xstate · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-02-01
Re: [PATCH v5 06/39] x86/fpu: Add helper for modifying xstate · Borislav Petkov <bp@alien8.de> · 2023-02-01
[PATCH v5 01/39] Documentation/x86: Add CET shadow stack description · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 01/39] Documentation/x86: Add CET shadow stack description · Kees Cook <hidden> · 2023-01-20
[PATCH v5 03/39] x86/cpufeatures: Add CPU feature flags for shadow stacks · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 03/39] x86/cpufeatures: Add CPU feature flags for shadow stacks · Kees Cook <hidden> · 2023-01-20
[PATCH v5 02/39] x86/shstk: Add Kconfig option for shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 02/39] x86/shstk: Add Kconfig option for shadow stack · Kees Cook <hidden> · 2023-01-20
[PATCH v5 08/39] x86/mm: Remove _PAGE_DIRTY from kernel RO pages · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 08/39] x86/mm: Remove _PAGE_DIRTY from kernel RO pages · Kees Cook <hidden> · 2023-01-20
[PATCH v5 09/39] x86/mm: Move pmd_write(), pud_write() up in the file · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 07/39] x86: Add user control-protection fault handler · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 07/39] x86: Add user control-protection fault handler · Kees Cook <hidden> · 2023-01-20
Re: [PATCH v5 07/39] x86: Add user control-protection fault handler · Borislav Petkov <bp@alien8.de> · 2023-02-03
Re: [PATCH v5 07/39] x86: Add user control-protection fault handler · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-02-03
Re: [PATCH v5 07/39] x86: Add user control-protection fault handler · Borislav Petkov <bp@alien8.de> · 2023-02-03
Re: [PATCH v5 07/39] x86: Add user control-protection fault handler · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-02-03
Re: [PATCH v5 07/39] x86: Add user control-protection fault handler · Borislav Petkov <bp@alien8.de> · 2023-02-04
[PATCH v5 10/39] x86/mm: Introduce _PAGE_COW · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 10/39] x86/mm: Introduce _PAGE_COW · Kees Cook <hidden> · 2023-01-20
Re: [PATCH v5 10/39] x86/mm: Introduce _PAGE_COW · David Hildenbrand <hidden> · 2023-01-23
Re: [PATCH v5 10/39] x86/mm: Introduce _PAGE_COW · David Hildenbrand <hidden> · 2023-01-23
Re: [PATCH v5 10/39] x86/mm: Introduce _PAGE_COW · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-23
Re: [PATCH v5 10/39] x86/mm: Introduce _PAGE_COW · David Hildenbrand <hidden> · 2023-01-24
[PATCH v5 11/39] x86/mm: Update pte_modify for _PAGE_COW · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 11/39] x86/mm: Update pte_modify for _PAGE_COW · Kees Cook <hidden> · 2023-01-20
Re: [PATCH v5 11/39] x86/mm: Update pte_modify for _PAGE_COW · Borislav Petkov <bp@alien8.de> · 2023-02-09
Re: [PATCH v5 11/39] x86/mm: Update pte_modify for _PAGE_COW · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-02-09
Re: [PATCH v5 11/39] x86/mm: Update pte_modify for _PAGE_COW · Borislav Petkov <bp@alien8.de> · 2023-02-10
Re: [PATCH v5 11/39] x86/mm: Update pte_modify for _PAGE_COW · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-02-10
Re: [PATCH v5 11/39] x86/mm: Update pte_modify for _PAGE_COW · Borislav Petkov <bp@alien8.de> · 2023-02-17
Re: [PATCH v5 11/39] x86/mm: Update pte_modify for _PAGE_COW · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-02-17
[PATCH v5 12/39] x86/mm: Update ptep_set_wrprotect() and pmdp_set_wrprotect() for transition from _PAGE_DIRTY to _PAGE_COW · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 12/39] x86/mm: Update ptep_set_wrprotect() and pmdp_set_wrprotect() for transition from _PAGE_DIRTY to _PAGE_COW · Kees Cook <hidden> · 2023-01-20
[PATCH v5 14/39] mm: Move VM_UFFD_MINOR_BIT from 37 to 38 · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 13/39] x86/mm: Start actually marking _PAGE_COW · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 15/39] mm: Introduce VM_SHADOW_STACK for shadow stack memory · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 16/39] x86/mm: Check shadow stack page fault errors · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 16/39] x86/mm: Check shadow stack page fault errors · Kees Cook <hidden> · 2023-01-20
[PATCH v5 17/39] x86/mm: Update maybe_mkwrite() for shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 20/39] mm: Add guard pages around a shadow stack. · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-01-23
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-23
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-01-24
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-24
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-01-25
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-25
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-26
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-01-26
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-26
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-01-27
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-28
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-01-31
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-31
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-02-01
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-02-01
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-02-01
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-01-26
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-26
Re: [PATCH v5 18/39] mm: Handle faultless write upgrades for shstk · David Hildenbrand <hidden> · 2023-01-27
[PATCH v5 19/39] mm: Fixup places that call pte_mkwrite() directly · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 19/39] mm: Fixup places that call pte_mkwrite() directly · Kees Cook <hidden> · 2023-01-20
Re: [PATCH v5 19/39] mm: Fixup places that call pte_mkwrite() directly · Deepak Gupta <hidden> · 2023-02-14
Re: [PATCH v5 19/39] mm: Fixup places that call pte_mkwrite() directly · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-02-14
Re: [PATCH v5 19/39] mm: Fixup places that call pte_mkwrite() directly · Deepak Gupta <hidden> · 2023-02-14
Re: [PATCH v5 19/39] mm: Fixup places that call pte_mkwrite() directly · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-02-14
Re: [PATCH v5 19/39] mm: Fixup places that call pte_mkwrite() directly · Deepak Gupta <hidden> · 2023-02-15
[PATCH v5 21/39] mm/mmap: Add shadow stack pages to memory accounting · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 22/39] mm: Re-introduce vm_flags to do_mmap() · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 23/39] mm: Don't allow write GUPs to shadow stack memory · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 23/39] mm: Don't allow write GUPs to shadow stack memory · David Hildenbrand <hidden> · 2023-01-23
[PATCH v5 26/39] x86: Introduce userspace API for shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 26/39] x86: Introduce userspace API for shadow stack · Kees Cook <hidden> · 2023-01-20
[PATCH v5 25/39] mm: Warn on shadow stack memory in wrong vma · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 25/39] mm: Warn on shadow stack memory in wrong vma · Kees Cook <hidden> · 2023-01-20
[PATCH v5 24/39] x86/mm: Introduce MAP_ABOVE4G · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 27/39] x86/shstk: Add user-mode shadow stack support · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 27/39] x86/shstk: Add user-mode shadow stack support · Kees Cook <hidden> · 2023-01-20
[PATCH v5 28/39] x86/shstk: Handle thread shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 29/39] x86/shstk: Introduce routines modifying shstk · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 29/39] x86/shstk: Introduce routines modifying shstk · Kees Cook <hidden> · 2023-01-20
[PATCH v5 32/39] x86/shstk: Support WRSS for userspace · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 32/39] x86/shstk: Support WRSS for userspace · Kees Cook <hidden> · 2023-01-20
[PATCH v5 33/39] x86: Expose thread features in /proc/$PID/status · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 30/39] x86/shstk: Handle signals for shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 31/39] x86/shstk: Introduce map_shadow_stack syscall · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 31/39] x86/shstk: Introduce map_shadow_stack syscall · Kees Cook <hidden> · 2023-01-20
[PATCH v5 34/39] x86/shstk: Wire in shadow stack interface · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 36/39] x86/fpu: Add helper for initing features · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 38/39] x86/shstk: Add ARCH_SHSTK_UNLOCK · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
[PATCH v5 37/39] x86: Add PTRACE interface for shadow stack · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 37/39] x86: Add PTRACE interface for shadow stack · Kees Cook <hidden> · 2023-01-20
[PATCH v5 39/39] x86/shstk: Add ARCH_SHSTK_STATUS · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 39/39] x86/shstk: Add ARCH_SHSTK_STATUS · Kees Cook <hidden> · 2023-01-20
[PATCH v5 35/39] selftests/x86: Add shadow stack test · Rick Edgecombe <rick.p.edgecombe@intel.com> · 2023-01-19
Re: [PATCH v5 00/39] Shadow stacks for userspace · Andrew Morton <akpm@linux-foundation.org> · 2023-01-20
Re: [PATCH v5 00/39] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-20
Re: [PATCH v5 00/39] Shadow stacks for userspace · Kees Cook <hidden> · 2023-01-20
Re: [PATCH v5 00/39] Shadow stacks for userspace · "Edgecombe, Rick P" <rick.p.edgecombe@intel.com> · 2023-01-25
Re: [PATCH v5 00/39] Shadow stacks for userspace · John Allen <john.allen@amd.com> · 2023-01-20
Re: [PATCH v5 00/39] Shadow stacks for userspace · Mike Rapoport <rppt@kernel.org> · 2023-01-22

From: Kees Cook <hidden>
Date: 2023-01-20 00:38:20
Also in: linux-api, linux-doc, linux-mm, lkml

On Thu, Jan 19, 2023 at 01:22:39PM -0800, Rick Edgecombe wrote:

From: Yu-cheng Yu <redacted>

Introduce a new document on Control-flow Enforcement Technology (CET).

Tested-by: Pengfei Xu <redacted>
Tested-by: John Allen <john.allen@amd.com>
Signed-off-by: Yu-cheng Yu <redacted>

Reviewed-by: Kees Cook <redacted>

-- 
Kees Cook

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help