Re: [PATCH v3 1/8] KVM:VMX: Define CET VMCS fields and bits

2019-02-28 Thread Yang Weijiang
On Thu, Feb 28, 2019 at 07:53:45AM -0800, Sean Christopherson wrote: > On Tue, Feb 26, 2019 at 11:31:11AM -0800, Jim Mattson wrote: > > On Mon, Feb 25, 2019 at 10:32 PM Yang Weijiang > > wrote: > > > > > > CET - Control-flow Enforcement Technology, it's used to > > > protect against return/jump

Re: [PATCH v3 1/8] KVM:VMX: Define CET VMCS fields and bits

2019-02-28 Thread Sean Christopherson
On Tue, Feb 26, 2019 at 11:31:11AM -0800, Jim Mattson wrote: > On Mon, Feb 25, 2019 at 10:32 PM Yang Weijiang > wrote: > > > > CET - Control-flow Enforcement Technology, it's used to > > protect against return/jump oriented programming (ROP) > > attacks. It provides the following capabilities to

Re: [PATCH v3 1/8] KVM:VMX: Define CET VMCS fields and bits

2019-02-26 Thread Yang Weijiang
On Tue, Feb 26, 2019 at 11:31:11AM -0800, Jim Mattson wrote: > On Mon, Feb 25, 2019 at 10:32 PM Yang Weijiang > wrote: > > > > CET - Control-flow Enforcement Technology, it's used to > > protect against return/jump oriented programming (ROP) > > attacks. It provides the following capabilities to

Re: [PATCH v3 1/8] KVM:VMX: Define CET VMCS fields and bits

2019-02-26 Thread Jim Mattson
On Mon, Feb 25, 2019 at 10:32 PM Yang Weijiang wrote: > > CET - Control-flow Enforcement Technology, it's used to > protect against return/jump oriented programming (ROP) > attacks. It provides the following capabilities to defend > against ROP/JOP style control-flow subversion attacks: > -

[PATCH v3 1/8] KVM:VMX: Define CET VMCS fields and bits

2019-02-25 Thread Yang Weijiang
CET - Control-flow Enforcement Technology, it's used to protect against return/jump oriented programming (ROP) attacks. It provides the following capabilities to defend against ROP/JOP style control-flow subversion attacks: - Shadow Stack (SHSTK): A second stack for the program