Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1345367

RE: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction

From "Mcfadden, Marty Jay" <mcfadden8@llnl.gov>
Newsgroups linux.kernel
Subject RE: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction
Date 2016-02-28 20:00 +0100
Message-ID <r7eJs-6Q8-13@gated-at.bofh.it> (permalink)
References <r6eit-3m0-3@gated-at.bofh.it> <r6lai-8f1-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


> * Ingo Molnar [mailto:mingo.kernel.org@gmail.com] wrote:
> 
> No, we really don't want to touch the old MSR code - it's a very opaque API with
> various deep limitations.
> 
> What I'd like to see instead is to use a modern system monitoring interface - and
> in fact that already happened in the last kernel release, we added the perf MSR
> access methods via:
> 
>  commit b7b7c7821d932ba18ef6c8eafc8536066b4c2ef4
>  Author: Andy Lutomirski <luto@kernel.org>
>  Date:   Mon Jul 20 11:49:06 2015 -0400
> 
>     perf/x86: Add an MSR PMU driver
> 
>     This patch adds an MSR PMU to support free running MSR counters. Such
>     as time and freq related counters includes TSC, IA32_APERF, IA32_MPERF
>     and IA32_PPERF, but also SMI_COUNT.
> 
>     The events are exposed in sysfs for use by perf stat and other tools.
>     The files are under /sys/devices/msr/events/
> 

Thank you Ingo, 

Our use case for MSR access is different.  In addition to being able to
access free running MSR counters, we also need to monitor (read) and
adjust (write) MSRs that may modify running system configurations.
One example set of MSRs that we need to be able to access are
associated with RAPL.

Further, system administrators need the ability to grant/deny MSR read
and/or write access at bit-level granularity for some of the MSRs in order
to maintain imposed security policies for their respective deployments.
The proposed whitelist approach allows for system administrators to set
a bit mask for the bits in each register where access is to be granted.

The cgroup management does not provide this level of granularity.
Instead it allows for an administrator to give a mode of access to either
all MSRs or none of them.

Thanks again,

Marty

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Marty McFadden <mcfadden8@llnl.gov> - 2016-02-26 01:20 +0100
  Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Ingo Molnar <mingo@kernel.org> - 2016-02-26 08:40 +0100
    RE: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction "Mcfadden, Marty Jay" <mcfadden8@llnl.gov> - 2016-02-28 20:00 +0100
      Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Borislav Petkov <bp@alien8.de> - 2016-02-28 20:10 +0100
        RE: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction "Mcfadden, Marty Jay" <mcfadden8@llnl.gov> - 2016-02-29 04:00 +0100
          Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Borislav Petkov <bp@alien8.de> - 2016-02-29 16:00 +0100
            Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Henrique de Moraes Holschuh <hmh@hmh.eng.br> - 2016-02-29 17:40 +0100
              Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Borislav Petkov <bp@alien8.de> - 2016-02-29 18:30 +0100
            Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction "George Spelvin" <linux@horizon.com> - 2016-02-29 19:00 +0100
              Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Borislav Petkov <bp@alien8.de> - 2016-02-29 19:30 +0100
                RE: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction "Mcfadden, Marty Jay" <mcfadden8@llnl.gov> - 2016-02-29 23:40 +0100
                Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Borislav Petkov <bp@alien8.de> - 2016-03-01 00:50 +0100
                Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction "Rountree, Barry L." <rountree4@llnl.gov> - 2016-03-01 20:10 +0100
                Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Andy Lutomirski <luto@amacapital.net> - 2016-03-03 01:50 +0100
                RE: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Thomas Gleixner <tglx@linutronix.de> - 2016-03-01 09:10 +0100
                Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Borislav Petkov <bp@alien8.de> - 2016-03-01 19:40 +0100
                Re: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction "Rountree, Barry L." <rountree4@llnl.gov> - 2016-03-01 19:40 +0100
          RE: [PATCH 0/4] MSR: MSR: MSR Whitelist and Batch Introduction Andy Lutomirski <luto@amacapital.net> - 2016-02-29 18:20 +0100

csiph-web