Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1672529

Re: [PATCH v7 18/36] x86/efi: Update EFI pagetable creation to work with SME

From Matt Fleming <matt@codeblueprint.co.uk>
Newsgroups linux.kernel
Subject Re: [PATCH v7 18/36] x86/efi: Update EFI pagetable creation to work with SME
Date 2017-06-22 13:00 +0200
Message-ID <tV80a-3zb-9@gated-at.bofh.it> (permalink)
References <tTjsJ-5VA-5@gated-at.bofh.it> <tV80a-3zb-11@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Fri, 16 Jun, at 01:53:17PM, Tom Lendacky wrote:
> When SME is active, pagetable entries created for EFI need to have the
> encryption mask set as necessary.
> 
> When the new pagetable pages are allocated they are mapped encrypted. So,
> update the efi_pgt value that will be used in cr3 to include the encryption
> mask so that the PGD table can be read successfully. The pagetable mapping
> as well as the kernel are also added to the pagetable mapping as encrypted.
> All other EFI mappings are mapped decrypted (tables, etc.).
> 
> Reviewed-by: Borislav Petkov <bp@suse.de>
> Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
> ---
>  arch/x86/platform/efi/efi_64.c |   15 +++++++++++----
>  1 file changed, 11 insertions(+), 4 deletions(-)
 
Reviewed-by: Matt Fleming <matt@codeblueprint.co.uk>

Back to linux.kernel | Previous | Next | Find similar | Unroll thread


Thread

Re: [PATCH v7 18/36] x86/efi: Update EFI pagetable creation to work  with SME Matt Fleming <matt@codeblueprint.co.uk> - 2017-06-22 13:00 +0200

csiph-web