mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2025-01-04 04:44:37 +08:00
66c57edd3b
The host kernel is currently able to change EL2 stage-1 mappings without restrictions thanks to the __pkvm_create_mappings() hypercall. But in a world where the host is no longer part of the TCB, this clearly poses a problem. To fix this, introduce a new hypercall to allow the host to share a physical memory page with the hypervisor, and remove the __pkvm_create_mappings() variant. The new hypercall implements ownership and permission checks before allowing the sharing operation, and it annotates the shared page in the hypervisor stage-1 and host stage-2 page-tables. Signed-off-by: Quentin Perret <qperret@google.com> Reviewed-by: Fuad Tabba <tabba@google.com> Signed-off-by: Marc Zyngier <maz@kernel.org> Link: https://lore.kernel.org/r/20210809152448.1810400-21-qperret@google.com |
||
---|---|---|
.. | ||
include | ||
nvhe | ||
vhe | ||
aarch32.c | ||
entry.S | ||
exception.c | ||
fpsimd.S | ||
hyp-entry.S | ||
Makefile | ||
pgtable.c | ||
reserved_mem.c | ||
vgic-v2-cpuif-proxy.c | ||
vgic-v3-sr.c |