[PATCH v2 0/3] x86/asm: More pinning

From: Kees Cook
Date: Wed Feb 27 2019 - 15:01:53 EST


This adds CR0 pinning (for WP), and cleans up the CR4 pin to avoid
taking an exception from WARN before fixing up the desired pin.
Additionally adds lkdtm test (which depends on the CR4 patch, otherwise
I'd send it via Greg's tree).

v2:
- include brown-paper-bag fix to lkdtm test in v1
- clean up comments

Thanks!

-Kees

Kees Cook (3):
x86/asm: Pin sensitive CR0 bits
x86/asm: Avoid taking an exception before cr4 restore
lkdtm: Check for SMEP clearing protections

arch/x86/include/asm/special_insns.h | 37 ++++++++++++++---
drivers/misc/lkdtm/bugs.c | 61 ++++++++++++++++++++++++++++
drivers/misc/lkdtm/core.c | 1 +
drivers/misc/lkdtm/lkdtm.h | 1 +
4 files changed, 95 insertions(+), 5 deletions(-)

--
2.17.1