lkml.org 
[lkml]   [2018]   [Oct]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: l1tf: Kernel suggests I throw away third of my memory. I'd rather not
From
Date
On 10/17/2018 04:32 AM, Pavel Machek wrote:
>> Well, that depends. Do you care about PROT_NONE attacks as well? If not
>> then no-swap would help you. But even then no-swap is rather theoretical
>> attack on a physical host unless you allow an arbitrary swapout to a
>> malicious user (e.g. allow a user controlled memcg hard limit that would
>> cause excessive local swapouts).
> PROT_NONE attack.. aha, so kernel stores not only information about
> swapped-out pages but also about file-backed pages that are currently
> not present? Hmm. That makes it more complex :-(.

There are also migration PTE entries that are "swap-like". They can
exist even if you swapoff -a.

Can we do better? Sure. I think we'd all be happy to review patches
that improve the situation if folks have simple ideas for improvement.

[unhandled content-type:application/pgp-signature]
\
 
 \ /
  Last update: 2018-10-18 00:21    [W:0.053 / U:0.048 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site