Paolo Bonzini 46515736f8 kvm: whitelist struct kvm_vcpu_arch ... On x86, ARM and s390, struct kvm_vcpu_arch has a usercopy region that is read and written by the KVM_GET/SET_CPUID2 ioctls (x86) or KVM_GET/SET_ONE_REG (ARM/s390). Without whitelisting the area, KVM is completely broken on those architectures with usercopy hardening enabled. For now, allow writing to the entire struct on all architectures. The KVM tree will not refine this to an architecture-specific subset of struct kvm_vcpu_arch. Cc: kernel-hardening@lists.openwall.com Cc: Kees Cook <keescook@chromium.org> Cc: Christian Borntraeger <borntraeger@redhat.com> Cc: Christoffer Dall <cdall@linaro.org> Cc: Radim Krčmář <rkrcmar@redhat.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Acked-by: Christoffer Dall <christoffer.dall@linaro.org> Acked-by: Marc Zyngier <marc.zyngier@arm.com> Acked-by: Christian Borntraeger <borntraeger@de.ibm.com> Signed-off-by: Kees Cook <keescook@chromium.org>		2018-01-15 12:08:07 -08:00
..
arm	KVM: Let KVM_SET_SIGNAL_MASK work as advertised	2017-11-27 17:53:47 +01:00
async_pf.c	kvm,async_pf: Use swq_has_sleeper()	2017-09-15 16:57:11 +02:00
async_pf.h	KVM: fix checkpatch.pl errors in kvm/async_pf.h	2015-06-19 17:16:25 +02:00
coalesced_mmio.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
coalesced_mmio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
eventfd.c	Revert "KVM: Don't accept obviously wrong gsi values via KVM_IRQFD"	2017-09-19 08:37:17 +02:00
irqchip.c	KVM: use rcu access function for irq routing	2017-07-07 15:24:15 +02:00
Kconfig	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
kvm_main.c	kvm: whitelist struct kvm_vcpu_arch	2018-01-15 12:08:07 -08:00
vfio.c	vfio: New external user group/file match	2017-06-28 13:50:05 -06:00
vfio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00