mbox series

[v5,00/10] arm64: add system vulnerability sysfs entries

Message ID 20190227010544.597579-1-jeremy.linton@arm.com
Headers show
Series arm64: add system vulnerability sysfs entries | expand

Message

Jeremy Linton Feb. 27, 2019, 1:05 a.m. UTC
Arm64 machines should be displaying a human readable
vulnerability status to speculative execution attacks in
/sys/devices/system/cpu/vulnerabilities 

This series enables that behavior by providing the expected
functions. Those functions expose the cpu errata and feature
states, as well as whether firmware is responding appropriately
to display the overall machine status. This means that in a
heterogeneous machine we will only claim the machine is mitigated
or safe if we are confident all booted cores are safe or
mitigated.

v4->v5:
	Revert the changes to remove the CONFIG_EXPERT hidden
	       options, but leave the detection paths building
	       without #ifdef wrappers. Also remove the
	       CONFIG_GENERIC_CPU_VULNERABILITIES #ifdefs
	       as we are 'select'ing the option in the Kconfig.
	       This allows us to keep all three variations of
	       the CONFIG/enable/disable paths without a lot of
	       (CONFIG_X || CONFIG_Y) checks.
	Various bits/pieces moved between the patches in an attempt
		to keep similar features/changes together.

v3->v4:
        Drop the patch which selectivly exports sysfs entries
        Remove the CONFIG_EXPERT hidden options which allowed
               the kernel to be built without the vulnerability
               detection code.
        Pick Marc Z's patches which invert the white/black
               lists for spectrev2 and clean up the firmware
               detection logic.
        Document the existing kpti controls
        Add a nospectre_v2 option to boot time disable the
             mitigation

v2->v3:
        Remove "Unknown" states, replace with further blacklists
               and default vulnerable/not affected states.
        Add the ability for an arch port to selectively export
               sysfs vulnerabilities.

v1->v2:
        Add "Unknown" state to ABI/testing docs.
        Minor tweaks.

Jeremy Linton (6):
  arm64: Provide a command line to disable spectre_v2 mitigation
  arm64: add sysfs vulnerability show for meltdown
  arm64: Always enable spectrev2 vulnerability detection
  arm64: add sysfs vulnerability show for spectre v2
  arm64: Always enable ssb vulnerability detection
  arm64: add sysfs vulnerability show for speculative store bypass

Marc Zyngier (2):
  arm64: Advertise mitigation of Spectre-v2, or lack thereof
  arm64: Use firmware to detect CPUs that are not affected by Spectre-v2

Mian Yousaf Kaukab (2):
  arm64: add sysfs vulnerability show for spectre v1
  arm64: enable generic CPU vulnerabilites support

 .../admin-guide/kernel-parameters.txt         |   8 +-
 arch/arm64/Kconfig                            |   1 +
 arch/arm64/include/asm/cpufeature.h           |   4 -
 arch/arm64/kernel/cpu_errata.c                | 239 +++++++++++++-----
 arch/arm64/kernel/cpufeature.c                |  47 +++-
 5 files changed, 216 insertions(+), 83 deletions(-)

-- 
2.20.1

Comments

Catalin Marinas Feb. 28, 2019, 12:01 p.m. UTC | #1
Hi Jeremy,

On Tue, Feb 26, 2019 at 07:05:34PM -0600, Jeremy Linton wrote:
> Jeremy Linton (6):

>   arm64: Provide a command line to disable spectre_v2 mitigation

>   arm64: add sysfs vulnerability show for meltdown

>   arm64: Always enable spectrev2 vulnerability detection

>   arm64: add sysfs vulnerability show for spectre v2

>   arm64: Always enable ssb vulnerability detection

>   arm64: add sysfs vulnerability show for speculative store bypass

> 

> Marc Zyngier (2):

>   arm64: Advertise mitigation of Spectre-v2, or lack thereof

>   arm64: Use firmware to detect CPUs that are not affected by Spectre-v2

> 

> Mian Yousaf Kaukab (2):

>   arm64: add sysfs vulnerability show for spectre v1

>   arm64: enable generic CPU vulnerabilites support


The patches look fine to me (I'm giving them some testing now). However,
It would be nice if we got the acks/reviewed-by tags from the people
that looked at the previous series (Andre, Suzuki, Julien). You haven't
included any tags in this series, I guess there were sufficient changes
not to carry them over.

If I get the acks by tomorrow, I'll queue them for 5.1, otherwise they'd
have to wait for the next merging window.

Thanks.

-- 
Catalin
Stefan Wahren March 1, 2019, 7:35 p.m. UTC | #2
Hi Jeremy,

> Jeremy Linton <jeremy.linton@arm.com> hat am 27. Februar 2019 um 02:05 geschrieben:

> 

> 

> Arm64 machines should be displaying a human readable

> vulnerability status to speculative execution attacks in

> /sys/devices/system/cpu/vulnerabilities 

> 

> This series enables that behavior by providing the expected

> functions. Those functions expose the cpu errata and feature

> states, as well as whether firmware is responding appropriately

> to display the overall machine status. This means that in a

> heterogeneous machine we will only claim the machine is mitigated

> or safe if we are confident all booted cores are safe or

> mitigated.

> 


here are the results for Raspberry Pi 3 B:

l1tf:Not affected
meltdown:Not affected
spec_store_bypass:Not affected
spectre_v1:Mitigation: __user pointer sanitization
spectre_v2:Not affected

Tested-by: Stefan Wahren <stefan.wahren@i2se.com>