From patchwork Fri Dec 13 11:33:06 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Max Hsu X-Patchwork-Id: 13906930 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 6C7FBE7717D for ; Fri, 13 Dec 2024 11:33:25 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:Cc:To:MIME-Version:Message-Id:Date: Subject:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References: List-Owner; bh=4CCLd3FRuuOEtY1lUVP9tCS3GsAsJmeZb66F8CbzXaA=; b=P/70sva8EkikSN mK3FF8PDrx/I0giYbIVaF2+SLWfCsKLdF5utbgFmLZTDpRu/7k/4i/FF6orBtwMZghj9K4KsVYvJ9 5o5Of6d7EfaRtYJRh+zmDhODuGHolLat/eSi8ZLmj4fm6lf0Kdgm+I+U2xliHXDh+Y8ePpwWRGdNn cX80n0lQjHWHmN9KLhcJynhgquasNDkOncJChlv+QimSiLcMIRsNN0b3G8ibLvJns/OlAlP55OdXY 6i11wz+rQP9GmPj1FxcBQ93UBEUKrk7sYQ41BQHz+oJ1ThcIMq0XVzNGUDzgT1ogULwHP8vSL/Ytn BEM8UrdQ2fbQXzrd/3Uw==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.98 #2 (Red Hat Linux)) id 1tM3v6-00000003Zv2-1MC0; Fri, 13 Dec 2024 11:33:20 +0000 Received: from mail-pl1-x642.google.com ([2607:f8b0:4864:20::642]) by bombadil.infradead.org with esmtps (Exim 4.98 #2 (Red Hat Linux)) id 1tM3v2-00000003Zru-1uPj for linux-riscv@lists.infradead.org; Fri, 13 Dec 2024 11:33:19 +0000 Received: by mail-pl1-x642.google.com with SMTP id d9443c01a7336-20cf3e36a76so15665735ad.0 for ; Fri, 13 Dec 2024 03:33:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sifive.com; s=google; t=1734089595; x=1734694395; darn=lists.infradead.org; h=cc:to:content-transfer-encoding:mime-version:message-id:date :subject:from:from:to:cc:subject:date:message-id:reply-to; bh=26MbCcxBXRObwdyBKZjlPQXxYB9MTH5C48d0Ryy4x64=; b=FV4V6lrKHHlfzgOS6T/4NXUtd8EVf14N6a88DCaU6NsieK28KeiV0pmVREzwPcpK2Z KpLdRkwFOEJVXc4LEO4gxveP9k4g3xsq6mcsjFCHynDZwDHIKqYT05nITG3WV6U/MayZ IaF6FwYWJjvB3E2nm2hmj4ACP+Znpk6cpslaAvUVNzPAoFZx5X1pdnAJy1R2fvJnPKaY W3ESJb+3x1gdMT0DUX9jrndtsgVvpVgxTqC1OnC4s46rVao2Qt0Y7xvpqX4MEcSMq+Rj DKX58EEZT3xQCW0BBdYD3CNvfsTo0fQ6oddSfGEteGQu5DNh6FI9K/aDUyci09ILeRgi l2Ww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1734089595; x=1734694395; h=cc:to:content-transfer-encoding:mime-version:message-id:date :subject:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=26MbCcxBXRObwdyBKZjlPQXxYB9MTH5C48d0Ryy4x64=; b=cKo73zueVI9O4udgIVrJu6ieJ4o/1fGiWQTyVZ6L9EfS3nVDLf9OQkJOMGaippcOq7 4vGXQFmWDK7p0f1o9zgW34eB21entHZUGZIycG95az87dlQmeOyvMZKFvPKP9yJMPtm1 oO54Rl3Isbe7IRGftrF2Z350Ig1C52G8EtsF/+XUJe2VhqXeIlch5uaUlWNvOPBfdkBQ tvBbRracroK2guhocWo2W0BfvGGraugDic/EX4dUHPxhrXpAUdQbdn3YoEABzDAmComr xXNZ0LVjYxV9rk9SbPm2mD0aeyxydxruZCK+XBfguoVRDmoDqi5yWVzj32iFwyBkWk/s 2aVw== X-Forwarded-Encrypted: i=1; AJvYcCWjBUf6mMGd1uNao0hT9iQRQLaU81937wJHoogbjzx64urz61EU0KDcCwwJsuq/xuIv0aDyCy8y9ciIDg==@lists.infradead.org X-Gm-Message-State: AOJu0YzznWYMd+Pvo9CyURUJEYot61FHbBYsej+ElRz/cAQkxIm755ai BnFjqquJRxenK1DKhdz2QZWLkGYNRUbWjgTaRTF6k2tVN7I11GzE0pwaBUt8dSI= X-Gm-Gg: ASbGncsuk5f30483ZFrt5PZnLhiDANNzMzTjJO315qndeSQWXAG8xwKPPKket1ftAfi ZfkgmV+lR8zGUDOxMTtUb5wgo9tKoum9dOXOg8JHCIwBAkePSHJ/j0Sc7Gn1tkYoWBE0EysxCEl Rz6EkIu/v1LtsX08L4gx1qqR9+ou4tzqU/D729CYNg+nnXL4ZgTIP+0bvd7KVC2G1TJ1q5lMisb Pr+wWRNZPuXcRsUt5XjVBSwT0Jy8LsStqykfm7lCid5WHX2pc0VaNY= X-Google-Smtp-Source: AGHT+IE2aHmaFHTR9iBiCUjqMgt+u4ssTP/m0KwR0xBzwYlNhga7euk988OdWGvjpY5KeC8o/0oqRQ== X-Received: by 2002:a17:902:d50c:b0:215:bc30:c952 with SMTP id d9443c01a7336-2189298a144mr36097955ad.6.1734089595266; Fri, 13 Dec 2024 03:33:15 -0800 (PST) Received: from [127.0.1.1] ([210.176.154.34]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-21631bd2c2dsm103327125ad.263.2024.12.13.03.33.11 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Dec 2024 03:33:14 -0800 (PST) From: Max Hsu Subject: [PATCH RFC v4 0/3] riscv: add Svukte extension Date: Fri, 13 Dec 2024 19:33:06 +0800 Message-Id: <20241213-dev-maxh-svukte-v4-v4-0-92762c67f743@sifive.com> MIME-Version: 1.0 X-B4-Tracking: v=1; b=H4sIAHIbXGcC/6tWKk4tykwtVrJSqFYqSi3LLM7MzwNyTHQUlJIzE vPSU3UzU4B8JSMDIxNDI0Nj3ZTUMt3cxIoM3eKy0uySVN0yE11jE0MDw9RkSxPTVEsloMaCotS 0zAqwodFKQW7OSrG1tQCcvFY+aQAAAA== X-Change-ID: 20241213-dev-maxh-svukte-v4-34101ec945e9 To: Rob Herring , Krzysztof Kozlowski , Conor Dooley , Paul Walmsley , Palmer Dabbelt , Albert Ou , Anup Patel , Atish Patra Cc: Palmer Dabbelt , Conor Dooley , devicetree@vger.kernel.org, linux-riscv@lists.infradead.org, linux-kernel@vger.kernel.org, kvm@vger.kernel.org, kvm-riscv@lists.infradead.org, Max Hsu , Samuel Holland , Deepak Gupta , Alexandre Ghiti X-Mailer: b4 0.14.2 X-Developer-Signature: v=1; a=openpgp-sha256; l=3076; i=max.hsu@sifive.com; h=from:subject:message-id; bh=tbP+jC6o0WUbBs5wzvPexsjiCSh2sPVpbTXynXjrfGk=; b=owEB7QES/pANAwAKAdID/Z0HeUC9AcsmYgBnXBt3nDotuBhQJRSQUC7kSPKHLLlxqASJuOrQK U5Px7fhMk6JAbMEAAEKAB0WIQTqXmcbOhS2KZE9X2jSA/2dB3lAvQUCZ1wbdwAKCRDSA/2dB3lA vcR4C/4irx2RT/e5bqfqAIm563+xO9z5R4UvXSir/eIK9aVaHYeMVqEdWbPauFsH5lGk+WLVpEh B9p8z3ebch6wZM/EHolPkw5wCN6bU7kouNEK4mTX9ciVvsgk2viGkFg2kuwQvxkDyPPTI0lG8py 1O3tqm3kG9nv6YuBgJE/jFYHQK7AWqyGq+Z97fxy1+je3mdJ360SkwAJwLJruDet2/B39bd0wud Ye+9EUv44RY8nUGvq1E2teWhCcDGwysMSPwo1euaAG98AGzu82QpJMNE6CVjTcjryau0iu9eXBi XYoOpu/POI0s/hE8t+RQpofxtx7Zxn0jbtV98fsNKJGCkHm2jPIwTetFCcRnxQ6+qY1Rv0FSUr3 rFMddvmyn+KHaBt0yccQpl8GOFWWUtn2G75N80wP5IUUW0H/6i/bCh45IGKSEVIMM/elBip6kNJ 6sczUcrwCMH7g+b/5nuLrefqZXCg3p8Fk8/PBw0e9gXgz5aFBEX3c4jf/BR6ynSkuAHds= X-Developer-Key: i=max.hsu@sifive.com; a=openpgp; fpr=EA5E671B3A14B629913D5F68D203FD9D077940BD X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20241213_033316_549671_D4E535BF X-CRM114-Status: GOOD ( 12.09 ) X-BeenThere: linux-riscv@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-riscv" Errors-To: linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org RISC-V privileged spec will be added with Svukte extension [1] Svukte introduce senvcfg.UKTE and hstatus.HUKTE bitfield. which makes user-mode access to supervisor memory raise page faults in constant time, mitigating attacks that attempt to discover the supervisor software's address-space layout. In the Linux kernel, since the hstatus.HU bit is not enabled, the following patches only enable the use of senvcfg.UKTE. For Guest environments, because a Guest OS (not limited to Linux) may hold mappings from GVA to GPA, the Guest OS should decide whether to enable the protection provided by the Svukte extension. Since the Guest OS may utilize the Svukte extension simply by setting the senvcfg.UKTE without any trap to host. In the view of VMM, the Svukte extension should be always presented. Therefore adding an extra entry in kvm_riscv_vcpu_isa_disable_allowed(). If the Guest environment wants to change senvcfg.UKTE, KVM already provides the senvcfg CSR swap support via kvm_riscv_vcpu_swap_in_(host|guest)_state. Thus, there is no concern about the Guest OS affecting the Host OS. The following patches add - dt-binding of Svukte ISA string - CSR bit definition, ISA detection, senvcfg.UKTE enablement in kernel - KVM ISA support for Svukte extension Changes in v4: - rebase on riscv/for-next - add kvm_riscv_vcpu_isa_disable_allowed() entry addressed by Anup and Andrew from v2/v3 patches. - update the cover letter for the detailed reason - update the commit message on dt-binding for the Svukte ISA string - Link to v3: https://lore.kernel.org/all/20241120-dev-maxh-svukte-v3-v3-0-1e533d41ae15@sifive.com/ Changes in v3: - rebase on riscv/for-next - fixed typo in the dt-binding for the Svukte ISA string - updated the commit message for KVM support for the Svukte extension - Link to v2: https://lore.kernel.org/all/20240927-dev-maxh-svukte-rebase-2-v2-0-9afe57c33aee@sifive.com/ Changes in v2: - rebase on riscv/for-next (riscv-for-linus-6.12-mw1) - modify the description of dt-binding on Svukte ISA string - Link to v1: https://lore.kernel.org/all/20240920-dev-maxh-svukte-rebase-v1-0-7864a88a62bd@sifive.com/ Link: https://github.com/riscv/riscv-isa-manual/pull/1564 [1] Signed-off-by: Max Hsu Reviewed-by: Anup Patel --- Max Hsu (3): dt-bindings: riscv: Add Svukte entry riscv: Add Svukte extension support riscv: KVM: Add Svukte extension support for Guest/VM Documentation/devicetree/bindings/riscv/extensions.yaml | 9 +++++++++ arch/riscv/include/asm/csr.h | 2 ++ arch/riscv/include/asm/hwcap.h | 1 + arch/riscv/include/uapi/asm/kvm.h | 1 + arch/riscv/kernel/cpufeature.c | 5 +++++ arch/riscv/kvm/vcpu_onereg.c | 2 ++ 6 files changed, 20 insertions(+) --- base-commit: fac04efc5c793dccbd07e2d59af9f90b7fc0dca4 change-id: 20241213-dev-maxh-svukte-v4-34101ec945e9 Best regards,