KVM: s390: Add vm IOCTL for key checked guest absolute memory access

Browse source

Channel I/O honors storage keys and is performed on absolute memory.
For I/O emulation user space therefore needs to be able to do key
checked accesses.
The vm IOCTL supports read/write accesses, as well as checking
if an access would succeed.
Unlike relying on KVM_S390_GET_SKEYS for key checking would,
the vm IOCTL performs the check in lockstep with the read or write,
by, ultimately, mapping the access to move instructions that
support key protection checking with a supplied key.
Fetch and storage protection override are not applicable to absolute
accesses and so are not applied as they are when using the vcpu memop.

Signed-off-by: Janis Schoetterl-Glausch <scgl@linux.ibm.com>
Reviewed-by: Christian Borntraeger <borntraeger@linux.ibm.com>
Link: https://lore.kernel.org/r/20220211182215.2730017-7-scgl@linux.ibm.com
Signed-off-by: Christian Borntraeger <borntraeger@linux.ibm.com>

...

This commit is contained in:

Janis Schoetterl-Glausch 2022-02-11 19:22:11 +01:00 • committed by Christian Borntraeger

parent e9e9feebcb

commit ef11c9463a

4 changed files with 161 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

72

arch/s390/kvm/gaccess.c

View file

6

arch/s390/kvm/gaccess.h

View file

81

arch/s390/kvm/kvm-s390.c

View file

2

include/uapi/linux/kvm.h

View file