Re: [Xen-devel] [PATCH] x86: re-enable NX if disabled

2015-12-07 Thread Jan Beulich
>>> On 04.12.15 at 19:25, wrote: > On 04/12/15 16:31, Jan Beulich wrote: >> @@ -56,6 +60,9 @@ trampoline_gdt: >> .long trampoline_gdt + BOOT_PSEUDORM_DS + 2 - . >> .popsection >> >> +GLOBAL(trampoline_misc_enable_off) >> +.quad 0 >> + > > For clarity, I would name

Re: [Xen-devel] [PATCH] x86: re-enable NX if disabled

2015-12-04 Thread Andrew Cooper
On 04/12/15 16:31, Jan Beulich wrote: > I noticed Linux 4.4 doing this universally now, and I think it's a good > idea to override such anti-security BIOS settings (we certainly have no > compatibility problem due to NX being enabled). I had a plan to do the same, so definitely +1. > > Secondary

[Xen-devel] [PATCH] x86: re-enable NX if disabled

2015-12-04 Thread Jan Beulich
I noticed Linux 4.4 doing this universally now, and I think it's a good idea to override such anti-security BIOS settings (we certainly have no compatibility problem due to NX being enabled). Secondary changes: - no need to check supported extended CPUID level for leaves 8000 and 8001 (r