lkml.org 
[lkml]   [2018]   [Jan]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH RFC 3/4] x86/pti: don't mark the user PGD with _PAGE_NX.

* Alan Cox <gnomes@lxorguk.ukuu.org.uk> wrote:

> > The simplest model is indeed child inheritance tree propagation - plus perhaps the
> > ability for a thread to change its *own* PTI status, which obviously doesn't
> > create any deep "process lookup" or cross-CPU complications.
> >
> > ( Note that here I only mean "simple to implement" - we might decide to not offer
> > the ABI. )
>
> I still think cgroups are the best model for this. In particular it
> naturally fits things like containers, or network facing apps that fork
> helpers.

I think the suggested exec() time inheritance model would naturally also cover
cgroups (without tying the ABI to cgroups) - as containers typically get inherited
from a single binary. A bit like how various personality bits get propagated.

Thanks,

Ingo

\
 
 \ /
  Last update: 2018-01-14 23:18    [W:0.109 / U:0.372 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site