lkml.org 
[lkml]   [2011]   [May]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH v2 0/4] Enable SMEP CPU Feature
    On 05/17/2011 10:03 AM, Ingo Molnar wrote:
    > * Fenghua Yu<fenghua.yu@intel.com> wrote:
    >
    > > From: Fenghua Yu<fenghua.yu@intel.com>
    > >
    > > Intel new CPU supports SMEP (Supervisor Mode Execution Protection). SMEP
    > > prevents kernel from executing code in application. Updated Intel SDM describes
    > > this CPU feature. The document will be published soon.
    > >
    > > Note: This patch set doesn't enable the SMEP feature in KVM. If it's needed,
    > > another patch will be pushed for enabling the feature in KVM.
    >
    > We can do it separately from native kernel support, but i'm sure Avi would
    > agree that SMEP support in KVM would be nice!

    Definitely.

    > (as long as it's configurable as
    > well, there might be guest OSs that break if SMEP is enabled, right?)

    As mentioned earlier, the simple thing is to expose smep and let the
    guest enable it itself.

    --
    error compiling committee.c: too many arguments to function



    \
     
     \ /
      Last update: 2011-05-17 11:19    [W:0.021 / U:90.232 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site