diff options
author | Laurent Dufour <[email protected]> | 2020-03-20 11:26:42 +0100 |
---|---|---|
committer | Paul Mackerras <[email protected]> | 2020-03-24 13:08:51 +1100 |
commit | 8c47b6ff29e3d88484fe59d02f9db6de7e44e310 (patch) | |
tree | de9517b28acd05a630c476a8205fc5c1afee66ae /scripts/gcc-plugins | |
parent | 9bee484b280a059c1faa10ae174af4f4af02c805 (diff) |
KVM: PPC: Book3S HV: Check caller of H_SVM_* Hcalls
The Hcall named H_SVM_* are reserved to the Ultravisor. However, nothing
prevent a malicious VM or SVM to call them. This could lead to weird result
and should be filtered out.
Checking the Secure bit of the calling MSR ensure that the call is coming
from either the Ultravisor or a SVM. But any system call made from a SVM
are going through the Ultravisor, and the Ultravisor should filter out
these malicious call. This way, only the Ultravisor is able to make such a
Hcall.
Cc: Bharata B Rao <[email protected]>
Cc: Benjamin Herrenschmidt <[email protected]>
Cc: Michael Ellerman <[email protected]>
Signed-off-by: Laurent Dufour <[email protected]>
Reviewed-by: Ram Pai <[email protected]>
Signed-off-by: Paul Mackerras <[email protected]>
Diffstat (limited to 'scripts/gcc-plugins')
0 files changed, 0 insertions, 0 deletions