Feng Wu 64df8742aa x86: enable Supervisor Mode Access Prevention (SMAP) for Xen ...

Supervisor Mode Access Prevention (SMAP) is a new security
feature disclosed by Intel, please refer to the following
document:

http://software.intel.com/sites/default/files/319433-014.pdf

If CR4.SMAP = 1, supervisor-mode data accesses are not allowed
to linear addresses that are accessible in user mode. If CPL < 3,
SMAP protections are disabled if EFLAGS.AC = 1. If CPL = 3, SMAP
applies to all supervisor-mode data accesses (these are implicit
supervisor accesses) regardless of the value of EFLAGS.AC.

This patch enables SMAP in Xen to prevent Xen hypervisor from
accessing pv guest data, whose translation paging-structure
entries' U/S flags are all set.

Signed-off-by: Feng Wu <feng.wu@intel.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Kevin Tian <kevin.tian@intel.com>

2014-05-12 17:03:38 +02:00

..

arm

xen/xsm: Add support for device tree

2014-03-27 14:56:38 +00:00

console.txt

docs: console: correct example console type definition

2012-08-17 14:57:29 +01:00

coverage.markdown

gcov: update documentation on coverage.

2013-05-30 09:31:05 +01:00

crashdb.txt

Fix gdb debugging of hypervisor.

2007-12-12 11:27:15 +00:00

distro_mapping.txt

docs: various typos

2012-06-28 16:57:26 +01:00

dump-core-format.txt

dump-core: update the documentation

2009-01-15 12:40:48 +00:00

efi.markdown

x86-64/EFI: allow chaining of config files

2012-09-12 10:19:34 +02:00

grant-tables.txt

bitkeeper revision 1.1344 (4266a1eeiNiXbU4vcENZiEEaX7Iybw)

2005-04-20 18:39:42 +00:00

hvm-emulated-unplug.markdown

Register PV driver product numbers 4 and 5.

2013-11-04 17:04:07 +00:00

kexec_and_kdump.txt

docs: remove ia64 from kexec_and_kdump.txt

2014-03-12 13:34:40 +00:00

libxl_memory.txt

docs: initial documentation for xenstore paths

2012-10-01 17:54:11 +01:00

pci-device-reservations.txt

docs: Add some words describing xen-pvdevice

2013-11-29 10:29:05 +00:00

printk-formats.txt

vsprintf: introduce %pv extended format specifier to print domain/vcpu ID pair

2014-02-28 17:04:04 +01:00

pvh-readme.txt

pvh: documentation

2013-11-13 09:41:59 +01:00

pvrdtscp.c

docs: Example usage of pvrdtscp algorithm

2009-12-11 08:51:21 +00:00

qemu-upstream_howto_use_it.markdown

docs: fix link in qemu-upstream doc

2012-07-24 10:29:17 +01:00

sedf_scheduler_mini-HOWTO.txt

docs: remove non-breaking spaces from sedf_scheduler_mini-HOWTO.txt

2011-11-29 15:18:18 +00:00

tmem-internals.html

docs: remove ia64 from tmem-internals.html

2014-03-12 13:37:20 +00:00

tscmode.txt

docs: various typos

2012-06-28 16:57:26 +01:00

vbd-interface.txt

libxl: introduce an option for disabling the non-O_DIRECT workaround

2014-05-02 17:50:27 +01:00

vtd.txt

Replace references to old wiki with ones to new.

2011-11-29 13:53:31 +00:00

vtpm-platforms.txt

vtpmmgr: use XSM label as vTPM kernel hash

2014-04-23 11:58:26 +01:00

vtpm.txt

vtpmmgr: add TPM group support

2014-04-23 11:56:41 +01:00

vtpmmgr.txt

vtpmmgr: use XSM label as vTPM kernel hash

2014-04-23 11:58:26 +01:00

xen_config.html

tools: vnet: Remove

2011-03-25 21:59:20 +00:00

xen-command-line.markdown

x86: enable Supervisor Mode Access Prevention (SMAP) for Xen

2014-05-12 17:03:38 +02:00

xen-error-handling.txt

docs: Add description of BUILD_BUG_ON().

2008-12-04 16:36:43 +00:00

xenpaging.txt

docs: update xenpaging.txt

2012-08-30 17:57:31 +01:00

xenstore-paths.markdown

docs: Document event-channel-based suspend protocol

2014-01-07 13:31:20 +00:00

xenstore.txt

docs: various typos

2012-06-28 16:57:26 +01:00

xl-disk-configuration.txt

libxl: introduce an option for disabling the non-O_DIRECT workaround

2014-05-02 17:50:27 +01:00

xl-network-configuration.markdown

libxl: Allow network driver domains when run_hotplug_scritps is set

2013-07-17 12:18:25 +01:00

xl-numa-placement.markdown

docs: rearrange and update NUMA placement documentation

2013-04-17 12:11:15 +01:00

xsm-flask.txt

domctl: tighten XEN_DOMCTL_*_permission

2014-05-08 13:57:12 +02:00