>>> On 20.04.15 at 19:09, <andrew.coop...@citrix.com> wrote: > A different approach, given the dual nature of the AC flag now is to gate > setup_smap() on a kernel rpl of 0. SMAP necessarily can't be used in a > paravirtual situation where the kernel runs in cpl > 0.
"Can't" isn't true here - for 64-bit PV Xen guests, which already toggle between two page table variants for kernel and user mode, it would be possible (but perhaps expensive) to mimic the needed behavior by introducing a 3rd set of page tables, containing only the kernel mappings. You may recall that I had even posted an RFC patch to tat effect about a year ago. Jan -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/