tree 847ceaf1da72de962a340ab78b963d8cb32e7eb0
parent def1aaf9e0bc6987bb4b417aac37226e994a1a74
author Quentin Perret <qperret@google.com> 1616148103 +0000
committer Marc Zyngier <maz@kernel.org> 1616155338 +0000

KVM: arm64: Wrap the host with a stage 2

When KVM runs in protected nVHE mode, make use of a stage 2 page-table
to give the hypervisor some control over the host memory accesses. The
host stage 2 is created lazily using large block mappings if possible,
and will default to page mappings in absence of a better solution.

>From this point on, memory accesses from the host to protected memory
regions (e.g. not 'owned' by the host) are fatal and lead to hyp_panic().

Acked-by: Will Deacon <will@kernel.org>
Signed-off-by: Quentin Perret <qperret@google.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20210319100146.1149909-36-qperret@google.com