Commit 1de32862 authored Jul 17, 2017 by Tom Lendacky Committed by Ingo Molnar Jul 18, 2017

x86/mm: Add support to access persistent memory in the clear



Persistent memory is expected to persist across reboots. The encryption
key used by SME will change across reboots which will result in corrupted
persistent memory.  Persistent memory is handed out by block devices
through memory remapping functions, so be sure not to map this memory as
encrypted.

Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Reviewed-by: Thomas Gleixner <tglx@linutronix.de>
Reviewed-by: Borislav Petkov <bp@suse.de>
Cc: Alexander Potapenko <glider@google.com>
Cc: Andrey Ryabinin <aryabinin@virtuozzo.com>
Cc: Andy Lutomirski <luto@kernel.org>
Cc: Arnd Bergmann <arnd@arndb.de>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Brijesh Singh <brijesh.singh@amd.com>
Cc: Dave Young <dyoung@redhat.com>
Cc: Dmitry Vyukov <dvyukov@google.com>
Cc: Jonathan Corbet <corbet@lwn.net>
Cc: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Cc: Larry Woodman <lwoodman@redhat.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Matt Fleming <matt@codeblueprint.co.uk>
Cc: Michael S. Tsirkin <mst@redhat.com>
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Radim Krčmář <rkrcmar@redhat.com>
Cc: Rik van Riel <riel@redhat.com>
Cc: Toshimitsu Kani <toshi.kani@hpe.com>
Cc: kasan-dev@googlegroups.com
Cc: kvm@vger.kernel.org
Cc: linux-arch@vger.kernel.org
Cc: linux-doc@vger.kernel.org
Cc: linux-efi@vger.kernel.org
Cc: linux-mm@kvack.org
Link: http://lkml.kernel.org/r/7d829302d8fdc85f3d9505fc3eb8ec0c3a3e1cbf.1500319216.git.thomas.lendacky@amd.com


Signed-off-by: Ingo Molnar <mingo@kernel.org>

parent 5997efb9

arch/x86/mm/ioremap.c

+30 −1

Original line number	Diff line number	Diff line
		@@ -424,17 +424,46 @@ void unxlate_dev_mem_ptr(phys_addr_t phys, void *addr)
		* Examine the physical address to determine if it is an area of memory
		* that should be mapped decrypted. If the memory is not part of the
		* kernel usable area it was accessed and created decrypted, so these
		* areas should be mapped decrypted.
		* areas should be mapped decrypted. And since the encryption key can
		* change across reboots, persistent memory should also be mapped
		* decrypted.
		*/
		static bool memremap_should_map_decrypted(resource_size_t phys_addr,
		unsigned long size)
		{
		int is_pmem;

		/*
		* Check if the address is part of a persistent memory region.
		* This check covers areas added by E820, EFI and ACPI.
		*/
		is_pmem = region_intersects(phys_addr, size, IORESOURCE_MEM,
		IORES_DESC_PERSISTENT_MEMORY);
		if (is_pmem != REGION_DISJOINT)
		return true;

		/*
		* Check if the non-volatile attribute is set for an EFI
		* reserved area.
		*/
		if (efi_enabled(EFI_BOOT)) {
		switch (efi_mem_type(phys_addr)) {
		case EFI_RESERVED_TYPE:
		if (efi_mem_attributes(phys_addr) & EFI_MEMORY_NV)
		return true;
		break;
		default:
		break;
		}
		}

		/* Check if the address is outside kernel usable area */
		switch (e820__get_entry_type(phys_addr, phys_addr + size - 1)) {
		case E820_TYPE_RESERVED:
		case E820_TYPE_ACPI:
		case E820_TYPE_NVS:
		case E820_TYPE_UNUSABLE:
		case E820_TYPE_PRAM:
		return true;
		default:
		break;

Admin message