x86, kaiser: un-poison PGDs at runtime
From: Dave Hansen <dave.hansen@linux.intel.com>
We poison kernel PGDs that map userspace with the NX bit. This
ensures that if we miss a kernel->user CR3 switch, userspace
crashes instead of running in an unhardened state.
We will need this code in a moment when we turn kaiser on and off
at runtime.
Note that we now need an __ASSEMBLY__ #ifdef since we are now
indirectly including kaiser.h into assembly.
Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com>
Cc: Moritz Lipp <moritz.lipp@iaik.tugraz.at>
Cc: Daniel Gruss <daniel.gruss@iaik.tugraz.at>
Cc: Michael Schwarz <michael.schwarz@iaik.tugraz.at>
Cc: Richard Fellner <richard.fellner@student.tugraz.at>
Cc: Andy Lutomirski <luto@kernel.org>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Kees Cook <keescook@google.com>
Cc: Hugh Dickins <hughd@google.com>
Cc: x86@kernel.org
3 files changed
