Re: [PATCH v1 1/2] KVM: arm: plug guest debug exploit

2017-05-11 Thread Alex Bennée
Marc Zyngier writes: > Hi Alex, > > On 10/05/17 18:01, Alex Bennée wrote: >> From: Zhichao Huang >> >> Hardware debugging in guests is not intercepted currently, it means >> that a malicious guest can bring down the entire machine by writing >>

Re: [PATCH v1 1/2] KVM: arm: plug guest debug exploit

2017-05-11 Thread Alex Bennée
Marc Zyngier writes: > Hi Alex, > > On 10/05/17 18:01, Alex Bennée wrote: >> From: Zhichao Huang >> >> Hardware debugging in guests is not intercepted currently, it means >> that a malicious guest can bring down the entire machine by writing >> to the debug registers. >> >> This patch enable

Re: [PATCH v1 1/2] KVM: arm: plug guest debug exploit

2017-05-11 Thread Marc Zyngier
Hi Alex, On 10/05/17 18:01, Alex Bennée wrote: > From: Zhichao Huang > > Hardware debugging in guests is not intercepted currently, it means > that a malicious guest can bring down the entire machine by writing > to the debug registers. > > This patch enable trapping

Re: [PATCH v1 1/2] KVM: arm: plug guest debug exploit

2017-05-11 Thread Marc Zyngier
Hi Alex, On 10/05/17 18:01, Alex Bennée wrote: > From: Zhichao Huang > > Hardware debugging in guests is not intercepted currently, it means > that a malicious guest can bring down the entire machine by writing > to the debug registers. > > This patch enable trapping of all debug registers,

[PATCH v1 1/2] KVM: arm: plug guest debug exploit

2017-05-10 Thread Alex Bennée
From: Zhichao Huang Hardware debugging in guests is not intercepted currently, it means that a malicious guest can bring down the entire machine by writing to the debug registers. This patch enable trapping of all debug registers, preventing the guests to access the

[PATCH v1 1/2] KVM: arm: plug guest debug exploit

2017-05-10 Thread Alex Bennée
From: Zhichao Huang Hardware debugging in guests is not intercepted currently, it means that a malicious guest can bring down the entire machine by writing to the debug registers. This patch enable trapping of all debug registers, preventing the guests to access the debug registers. This