Re: [PATCH v12 8/8] x86: Disallow vsyscall emulation when CET is enabled

From: Dave Hansen
Date: Fri Sep 18 2020 - 15:33:13 EST

Next message: aris@xxxxxxxxx: "Re: [PATCH v4 0/7] HWpoison: further fixes and cleanups"
Previous message: Aristeu Rozanski: "Re: [PATCH v4 3/7] mm,hwpoison: Try to narrow window race for free pages"
In reply to: Yu-cheng Yu: "[PATCH v12 8/8] x86: Disallow vsyscall emulation when CET is enabled"
Next in thread: Pavel Machek: "Re: [PATCH v12 8/8] x86: Disallow vsyscall emulation when CET is enabled"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On 9/18/20 12:23 PM, Yu-cheng Yu wrote:
> Emulation of the legacy vsyscall page is required by some programs
> built before 2013. Newer programs after 2013 don't use it.
> Disable vsyscall emulation when Control-flow Enforcement (CET) is
> enabled to enhance security.

How does this "enhance security"?

What is the connection between vsyscall emulation and CET?

Next message: aris@xxxxxxxxx: "Re: [PATCH v4 0/7] HWpoison: further fixes and cleanups"
Previous message: Aristeu Rozanski: "Re: [PATCH v4 3/7] mm,hwpoison: Try to narrow window race for free pages"
In reply to: Yu-cheng Yu: "[PATCH v12 8/8] x86: Disallow vsyscall emulation when CET is enabled"
Next in thread: Pavel Machek: "Re: [PATCH v12 8/8] x86: Disallow vsyscall emulation when CET is enabled"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]