Re: [PATCH v2 0/4] Enable SMEP CPU Feature

[Avi Kivity]

On 05/17/2011 02:44 PM, Avi Kivity wrote:
> On 05/17/2011 02:38 PM, Ingo Molnar wrote:
> > >
> > >  Depends if the guest uses a read-modify-write pattern or not.  We 
> > could do it
> > >  transparently in kvm.ko, since the real cr4 need not corresponds 
> > to the guest
> > >  notion (for example, we often set cr0.wp or cr0.ts even though the 
> > guest
> > >  wants them clear).
> >
> > Oh, being transparent is a nice touch when it comes to security measures
> > (catching attackers who think there's no SMEP and such) - but that 
> > would need
> > KVM support and a new ioctl to configure it, right?
>
> Yes.

btw, KVM support is required anyway, you can't set random bits in cr4 
(from either the guest or host userspace) - kvm needs to understand them.

--
error compiling committee.c: too many arguments to function

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/