From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751332AbdGQL5S (ORCPT ); Mon, 17 Jul 2017 07:57:18 -0400 Received: from usa-sjc-mx-foss1.foss.arm.com ([217.140.101.70]:38368 "EHLO foss.arm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751306AbdGQL5P (ORCPT ); Mon, 17 Jul 2017 07:57:15 -0400 Date: Mon, 17 Jul 2017 12:56:10 +0100 From: Mark Rutland To: Ard Biesheuvel Cc: Kees Cook , Will Deacon , Catalin Marinas , "linux-kernel@vger.kernel.org" , "devicetree@vger.kernel.org" , Rob Herring , Matt Redfearn Subject: Re: [PATCH] Documentation: dt: chosen property for kaslr-seed Message-ID: <20170717115557.GA29650@remoulade> References: <20170715003836.GA113132@beast> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.24 (2015-08-30) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Jul 16, 2017 at 05:42:25PM +0100, Ard Biesheuvel wrote: > On 16 July 2017 at 03:13, Kees Cook wrote: > > On Sat, Jul 15, 2017 at 5:42 AM, Ard Biesheuvel > > wrote: > >> (+ Mark, Will, Catalin) > >> > >> On 15 July 2017 at 01:38, Kees Cook wrote: > >>> Document then /chosen/kaslr-seed property (and its interaction with the > >>> EFI_RNG_PROTOCOL API). > >>> > >>> Signed-off-by: Kees Cook > >>> --- > >>> Documentation/devicetree/bindings/chosen.txt | 22 ++++++++++++++++++++-- > >>> 1 file changed, 20 insertions(+), 2 deletions(-) > >> > >> For the textual changes: > >> > >> Acked-by: Ard Biesheuvel > >> > >> *However*, documenting the /chosen/kaslr-seed property promotes it > >> from a stub<->kernel private interface to an external ABI between the > >> kernel and the bootloader, and we need to reach agreement on whether > >> doing so is desirable first IMHO. > > > > Oh! I thought that was the point (having a bootloader provide kaslr > > entropy). And that in the EFI case, it was the stub doing it. > > It was the opposite, actually, The /chosen node is the most > appropriate way for the EFI stub to communicate a seed value to the > kernel proper, given how it is needed extremely early in the boot. > (Using UEFI config tables like we do for the /dev/random seed is not > possible for this) > > So as a side effect, other bootloaders can use the same mechanism. I'm > fine with that, but it needs to be an explicit decision by the > maintainers imo. I was under the impression that we'd already assumed other bootloaders could set this, so I don't have a problem promoting this to a defined public interface. I guess we just need Will and Catalin to agree. FWIW: Acked-by: Mark Rutland As an aside, we might want to make a split between /chosen properties which are Linux-specific (e.g. this), and those which are somewhat generic (e.g. stdout-path), since other OSs may/should respect those generic ones. Mark.