Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1672529
| From | Matt Fleming <matt@codeblueprint.co.uk> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: [PATCH v7 18/36] x86/efi: Update EFI pagetable creation to work with SME |
| Date | 2017-06-22 13:00 +0200 |
| Message-ID | <tV80a-3zb-9@gated-at.bofh.it> (permalink) |
| References | <tTjsJ-5VA-5@gated-at.bofh.it> <tV80a-3zb-11@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Fri, 16 Jun, at 01:53:17PM, Tom Lendacky wrote: > When SME is active, pagetable entries created for EFI need to have the > encryption mask set as necessary. > > When the new pagetable pages are allocated they are mapped encrypted. So, > update the efi_pgt value that will be used in cr3 to include the encryption > mask so that the PGD table can be read successfully. The pagetable mapping > as well as the kernel are also added to the pagetable mapping as encrypted. > All other EFI mappings are mapped decrypted (tables, etc.). > > Reviewed-by: Borislav Petkov <bp@suse.de> > Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com> > --- > arch/x86/platform/efi/efi_64.c | 15 +++++++++++---- > 1 file changed, 11 insertions(+), 4 deletions(-) Reviewed-by: Matt Fleming <matt@codeblueprint.co.uk>
Back to linux.kernel | Previous | Next | Find similar | Unroll thread
Re: [PATCH v7 18/36] x86/efi: Update EFI pagetable creation to work with SME Matt Fleming <matt@codeblueprint.co.uk> - 2017-06-22 13:00 +0200
csiph-web