@@ -258,3 +258,65 @@ replies. These messages might be extended in futures versions and while
the kernel will accept shorter messages (older versions) or bigger
messages (newer versions, ignoring the extra information) it will not
accept bigger/newer event replies.
+
+2. KVMI_VM_CHECK_COMMAND
+------------------------
+
+:Architectures: all
+:Versions: >= 1
+:Parameters:
+
+::
+
+ struct kvmi_vm_check_command {
+ __u16 id;
+ __u16 padding1;
+ __u32 padding2;
+ };
+
+:Returns:
+
+::
+
+ struct kvmi_error_code;
+
+Checks if the command specified by ``id`` is supported and allowed.
+
+This command is always allowed.
+
+:Errors:
+
+* -KVM_ENOENT - the command specified by ``id`` is unsupported
+* -KVM_EPERM - the command specified by ``id`` is disallowed
+* -KVM_EINVAL - the padding is not zero
+
+3. KVMI_VM_CHECK_EVENT
+----------------------
+
+:Architectures: all
+:Versions: >= 1
+:Parameters:
+
+::
+
+ struct kvmi_vm_check_event {
+ __u16 id;
+ __u16 padding1;
+ __u32 padding2;
+ };
+
+:Returns:
+
+::
+
+ struct kvmi_error_code;
+
+Checks if the event specified by ``id`` is supported and allowed.
+
+This command is always allowed.
+
+:Errors:
+
+* -KVM_ENOENT - the event specified by ``id`` is unsupported
+* -KVM_EPERM - the event specified by ``id`` is disallowed
+* -KVM_EINVAL - the padding is not zero
@@ -14,7 +14,9 @@ enum {
};
enum {
- KVMI_GET_VERSION = 2,
+ KVMI_GET_VERSION = 2,
+ KVMI_VM_CHECK_COMMAND = 3,
+ KVMI_VM_CHECK_EVENT = 4,
KVMI_NUM_MESSAGES
};
@@ -50,4 +52,16 @@ struct kvmi_get_version_reply {
__u32 padding;
};
+struct kvmi_vm_check_command {
+ __u16 id;
+ __u16 padding1;
+ __u32 padding2;
+};
+
+struct kvmi_vm_check_event {
+ __u16 id;
+ __u16 padding1;
+ __u32 padding2;
+};
+
#endif /* _UAPI__LINUX_KVMI_H */
@@ -201,6 +201,59 @@ static void test_cmd_get_version(void)
DEBUG("KVMI version: %u\n", rpl.version);
}
+static int cmd_check_command(__u16 id)
+{
+ struct {
+ struct kvmi_msg_hdr hdr;
+ struct kvmi_vm_check_command cmd;
+ } req = {};
+
+ req.cmd.id = id;
+
+ return do_command(KVMI_VM_CHECK_COMMAND, &req.hdr, sizeof(req), NULL,
+ 0);
+}
+
+static void test_cmd_check_command(void)
+{
+ __u16 valid_id = KVMI_GET_VERSION;
+ __u16 invalid_id = 0xffff;
+ int r;
+
+ r = cmd_check_command(valid_id);
+ TEST_ASSERT(r == 0,
+ "KVMI_VM_CHECK_COMMAND failed, error %d (%s)\n",
+ -r, kvm_strerror(-r));
+
+ r = cmd_check_command(invalid_id);
+ TEST_ASSERT(r == -KVM_ENOENT,
+ "KVMI_VM_CHECK_COMMAND didn't failed with -KVM_ENOENT, error %d (%s)\n",
+ -r, kvm_strerror(-r));
+}
+
+static int cmd_check_event(__u16 id)
+{
+ struct {
+ struct kvmi_msg_hdr hdr;
+ struct kvmi_vm_check_event cmd;
+ } req = {};
+
+ req.cmd.id = id;
+
+ return do_command(KVMI_VM_CHECK_EVENT, &req.hdr, sizeof(req), NULL, 0);
+}
+
+static void test_cmd_check_event(void)
+{
+ __u16 invalid_id = 0xffff;
+ int r;
+
+ r = cmd_check_event(invalid_id);
+ TEST_ASSERT(r == -KVM_ENOENT,
+ "KVMI_VM_CHECK_EVENT didn't failed with -KVM_ENOENT, error %d (%s)\n",
+ -r, kvm_strerror(-r));
+}
+
static void test_introspection(struct kvm_vm *vm)
{
setup_socket();
@@ -208,6 +261,8 @@ static void test_introspection(struct kvm_vm *vm)
test_cmd_invalid();
test_cmd_get_version();
+ test_cmd_check_command();
+ test_cmd_check_event();
unhook_introspection(vm);
}
@@ -11,6 +11,7 @@
#define KVMI_MSG_SIZE_ALLOC (sizeof(struct kvmi_msg_hdr) + KVMI_MSG_SIZE)
static DECLARE_BITMAP(Kvmi_always_allowed_commands, KVMI_NUM_COMMANDS);
+DECLARE_BITMAP(Kvmi_known_events, KVMI_NUM_EVENTS);
static struct kmem_cache *msg_cache;
@@ -49,11 +50,19 @@ static void setup_always_allowed_commands(void)
{
bitmap_zero(Kvmi_always_allowed_commands, KVMI_NUM_COMMANDS);
set_bit(KVMI_GET_VERSION, Kvmi_always_allowed_commands);
+ set_bit(KVMI_VM_CHECK_COMMAND, Kvmi_always_allowed_commands);
+ set_bit(KVMI_VM_CHECK_EVENT, Kvmi_always_allowed_commands);
+}
+
+static void setup_known_events(void)
+{
+ bitmap_zero(Kvmi_known_events, KVMI_NUM_EVENTS);
}
int kvmi_init(void)
{
setup_always_allowed_commands();
+ setup_known_events();
return kvmi_cache_create();
}
@@ -16,6 +16,8 @@
#define kvmi_err(kvmi, fmt, ...) \
kvm_info("%pU ERROR: " fmt, &kvmi->uuid, ## __VA_ARGS__)
+extern DECLARE_BITMAP(Kvmi_known_events, KVMI_NUM_EVENTS);
+
#define KVMI(kvm) ((kvm)->kvmi)
/* kvmi_msg.c */
@@ -8,6 +8,8 @@
#include <linux/net.h>
#include "kvmi_int.h"
+static bool is_vm_command(u16 id);
+
bool kvmi_sock_get(struct kvm_introspection *kvmi, int fd)
{
struct socket *sock;
@@ -114,12 +116,57 @@ static int handle_get_version(struct kvm_introspection *kvmi,
return kvmi_msg_vm_reply(kvmi, msg, 0, &rpl, sizeof(rpl));
}
+static int handle_check_command(struct kvm_introspection *kvmi,
+ const struct kvmi_msg_hdr *msg,
+ const void *_req)
+{
+ const struct kvmi_vm_check_command *req = _req;
+ int ec = 0;
+
+ if (req->padding1 || req->padding2)
+ ec = -KVM_EINVAL;
+ else if (!is_vm_command(req->id))
+ ec = -KVM_ENOENT;
+ else if (!is_command_allowed(kvmi, req->id))
+ ec = -KVM_EPERM;
+
+ return kvmi_msg_vm_reply(kvmi, msg, ec, NULL, 0);
+}
+
+static bool is_event_known(u16 id)
+{
+ return id < KVMI_NUM_EVENTS && test_bit(id, Kvmi_known_events);
+}
+
+static bool is_event_allowed(struct kvm_introspection *kvmi, u16 id)
+{
+ return id < KVMI_NUM_EVENTS && test_bit(id, kvmi->event_allow_mask);
+}
+
+static int handle_check_event(struct kvm_introspection *kvmi,
+ const struct kvmi_msg_hdr *msg, const void *_req)
+{
+ const struct kvmi_vm_check_event *req = _req;
+ int ec = 0;
+
+ if (req->padding1 || req->padding2)
+ ec = -KVM_EINVAL;
+ else if (!is_event_known(req->id))
+ ec = -KVM_ENOENT;
+ else if (!is_event_allowed(kvmi, req->id))
+ ec = -KVM_EPERM;
+
+ return kvmi_msg_vm_reply(kvmi, msg, ec, NULL, 0);
+}
+
/*
* These commands are executed by the receiving thread/worker.
*/
static int(*const msg_vm[])(struct kvm_introspection *,
const struct kvmi_msg_hdr *, const void *) = {
- [KVMI_GET_VERSION] = handle_get_version,
+ [KVMI_GET_VERSION] = handle_get_version,
+ [KVMI_VM_CHECK_COMMAND] = handle_check_command,
+ [KVMI_VM_CHECK_EVENT] = handle_check_event,
};
static bool is_vm_command(u16 id)
These commands are used to check what introspection commands and events are supported (by kernel) and allowed (by userspace). These are alternative methods to KVMI_GET_VERSION in checking if the introspection supports a specific command/event. As with the KVMI_GET_VERSION command, these two can never be disallowed by userspace. Signed-off-by: Adalbert Lazăr <alazar@bitdefender.com> --- Documentation/virt/kvm/kvmi.rst | 62 +++++++++++++++++++ include/uapi/linux/kvmi.h | 16 ++++- .../testing/selftests/kvm/x86_64/kvmi_test.c | 55 ++++++++++++++++ virt/kvm/introspection/kvmi.c | 9 +++ virt/kvm/introspection/kvmi_int.h | 2 + virt/kvm/introspection/kvmi_msg.c | 49 ++++++++++++++- 6 files changed, 191 insertions(+), 2 deletions(-)