Re: [PATCH v2] x86/xen: allow userspace access during hypercalls

From: Juergen GroÃ
Date: Mon Jun 26 2017 - 08:54:35 EST


On 06/26/2017 02:49 PM, Marek Marczykowski-GÃrecki wrote:
Userspace application can do a hypercall through /dev/xen/privcmd, and
some for some hypercalls argument is a pointers to user-provided
structure. When SMAP is supported and enabled, hypervisor can't access.
So, lets allow it.

The same applies to HYPERVISOR_dm_op, where additionally privcmd driver
carefully verify buffer addresses.

Cc: stable@xxxxxxxxxxxxxxx
Signed-off-by: Marek Marczykowski-GÃrecki <marmarek@xxxxxxxxxxxxxxxxxxxxxx>

Reviewed-by: Juergen Gross <jgross@xxxxxxxx>


Thanks,

Juergen