lkml.org 
[lkml]   [2022]   [Nov]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 03/12] KVM: arm64: Block unsafe FF-A calls from the host
    On Wed, Nov 16, 2022 at 05:03:26PM +0000, Quentin Perret wrote:
    > From: Will Deacon <will@kernel.org>
    >
    > When KVM is initialised in protected mode, we must take care to filter
    > certain FFA calls from the host kernel so that the integrity of guest
    > and hypervisor memory is maintained and is not made available to the
    > secure world.
    >
    > As a first step, intercept and block all memory-related FF-A SMC calls
    > from the host to EL3. This puts the framework in place for handling them
    > properly.

    Shouldn't FFA_FEATURES interception actually precede this patch? At this
    point in the series we're outright lying about the supported features to
    the host.

    --
    Thanks,
    Oliver

    \
     
     \ /
      Last update: 2022-11-16 18:42    [W:4.138 / U:0.132 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site