KVM: arm64: Reject stub hypercalls after pKVM has been initialised

Browse source

The stub hypercalls provide mechanisms to reset and replace the EL2 code,
so uninstall them once pKVM has been initialised in order to ensure the
integrity of the hypervisor code.

To ensure pKVM initialisation remains functional, split cpu_hyp_reinit()
into two helper functions to separate usage of the stub from usage of
pkvm hypercalls either side of __pkvm_init on the boot CPU.

Cc: Marc Zyngier <maz@kernel.org>
Cc: Quentin Perret <qperret@google.com>
Signed-off-by: Will Deacon <will@kernel.org>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20211008135839.1193-4-will@kernel.org

...

This commit is contained in:

Will Deacon 2021-10-08 14:58:36 +01:00 • committed by Marc Zyngier

parent 8f4566f18d

commit 8579a185ba

2 changed files with 40 additions and 17 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

33

arch/arm64/kvm/arm.c

View file

26

arch/arm64/kvm/hyp/nvhe/host.S

View file