Re: [PATCH v3 01/11] KVM: arm: plug guest debug exploit

2015-07-01 Thread Christoffer Dall
On Wed, Jul 01, 2015 at 03:04:00PM +0800, zichao wrote: On June 29, 2015 11:49:53 PM GMT+08:00, Christoffer Dall christoffer.d...@linaro.org wrote: On Mon, Jun 22, 2015 at 06:41:24PM +0800, Zhichao Huang wrote: Hardware debugging in guests is not intercepted currently, it means that a

Re: [PATCH v3 01/11] KVM: arm: plug guest debug exploit

2015-07-01 Thread zichao
On June 29, 2015 11:49:53 PM GMT+08:00, Christoffer Dall christoffer.d...@linaro.org wrote: On Mon, Jun 22, 2015 at 06:41:24PM +0800, Zhichao Huang wrote: Hardware debugging in guests is not intercepted currently, it means that a malicious guest can bring down the entire machine by writing

Re: [PATCH v3 01/11] KVM: arm: plug guest debug exploit

2015-06-29 Thread Christoffer Dall
On Mon, Jun 22, 2015 at 06:41:24PM +0800, Zhichao Huang wrote: Hardware debugging in guests is not intercepted currently, it means that a malicious guest can bring down the entire machine by writing to the debug registers. This patch enable trapping of all debug registers, preventing the

[PATCH v3 01/11] KVM: arm: plug guest debug exploit

2015-06-22 Thread Zhichao Huang
Hardware debugging in guests is not intercepted currently, it means that a malicious guest can bring down the entire machine by writing to the debug registers. This patch enable trapping of all debug registers, preventing the guests to access the debug registers. This patch also disable the