Re: [PATCH v2 01/11] KVM: arm: plug guest debug exploit

2015-06-07 Thread zichao
Hi, Marc, On 2015/6/1 18:56, Marc Zyngier wrote: Hi Zhichao, On 31/05/15 05:27, Zhichao Huang wrote: Hardware debugging in guests is not intercepted currently, it means that a malicious guest can bring down the entire machine by writing to the debug registers. This patch enable trapping

Re: [PATCH v2 09/11] KVM: arm: disable debug mode if we don't actually need it.

2015-06-07 Thread zichao
Hi, Will, On 2015/6/1 18:16, Will Deacon wrote: On Sun, May 31, 2015 at 05:27:10AM +0100, Zhichao Huang wrote: Until now we enable debug mode all the time even if we don't actually need it. Inspired by the implementation in arm64, disable debug mode if we don't need it. And then we are able

Re: [PATCH 0/6] x86: reduce paravirtualized spinlock overhead

2015-06-07 Thread Juergen Gross
Ping? Anything missing from my side? On 04/30/2015 12:53 PM, Juergen Gross wrote: Paravirtualized spinlocks produce some overhead even if the kernel is running on bare metal. The main reason are the more complex locking and unlocking functions. Especially unlocking is no longer just one

[PATCH v5] i386: Introduce ARAT CPU feature

2015-06-07 Thread Jan Kiszka
From: Jan Kiszka jan.kis...@siemens.com ARAT signals that the APIC timer does not stop in power saving states. As our APICs are emulated, it's fine to expose this feature to guests, at least when asking for KVM host features or with CPU types that include the flag. The exact model number that

RE: [v3 24/26] KVM: Update Posted-Interrupts Descriptor when vCPU is blocked

2015-06-07 Thread Wu, Feng
-Original Message- From: Marcelo Tosatti [mailto:mtosa...@redhat.com] Sent: Saturday, June 06, 2015 5:59 AM To: Wu, Feng Cc: h...@zytor.com; t...@linutronix.de; mi...@redhat.com; x...@kernel.org; g...@kernel.org; pbonz...@redhat.com; dw...@infradead.org; j...@8bytes.org;