KVM: MMU audit: update audit_write_protection
- Unsync pages contain writable sptes in the rmap. - rmaps do not exclusively contain writable sptes anymore. Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com> Signed-off-by: Avi Kivity <avi@redhat.com>
This commit is contained in:
parent
08a3732bf2
commit
e58b0f9e0e
1 changed files with 11 additions and 3 deletions
|
@ -3260,20 +3260,28 @@ static void audit_write_protection(struct kvm_vcpu *vcpu)
|
||||||
struct kvm_mmu_page *sp;
|
struct kvm_mmu_page *sp;
|
||||||
struct kvm_memory_slot *slot;
|
struct kvm_memory_slot *slot;
|
||||||
unsigned long *rmapp;
|
unsigned long *rmapp;
|
||||||
|
u64 *spte;
|
||||||
gfn_t gfn;
|
gfn_t gfn;
|
||||||
|
|
||||||
list_for_each_entry(sp, &vcpu->kvm->arch.active_mmu_pages, link) {
|
list_for_each_entry(sp, &vcpu->kvm->arch.active_mmu_pages, link) {
|
||||||
if (sp->role.direct)
|
if (sp->role.direct)
|
||||||
continue;
|
continue;
|
||||||
|
if (sp->unsync)
|
||||||
|
continue;
|
||||||
|
|
||||||
gfn = unalias_gfn(vcpu->kvm, sp->gfn);
|
gfn = unalias_gfn(vcpu->kvm, sp->gfn);
|
||||||
slot = gfn_to_memslot_unaliased(vcpu->kvm, sp->gfn);
|
slot = gfn_to_memslot_unaliased(vcpu->kvm, sp->gfn);
|
||||||
rmapp = &slot->rmap[gfn - slot->base_gfn];
|
rmapp = &slot->rmap[gfn - slot->base_gfn];
|
||||||
if (*rmapp)
|
|
||||||
printk(KERN_ERR "%s: (%s) shadow page has writable"
|
spte = rmap_next(vcpu->kvm, rmapp, NULL);
|
||||||
" mappings: gfn %lx role %x\n",
|
while (spte) {
|
||||||
|
if (*spte & PT_WRITABLE_MASK)
|
||||||
|
printk(KERN_ERR "%s: (%s) shadow page has "
|
||||||
|
"writable mappings: gfn %lx role %x\n",
|
||||||
__func__, audit_msg, sp->gfn,
|
__func__, audit_msg, sp->gfn,
|
||||||
sp->role.word);
|
sp->role.word);
|
||||||
|
spte = rmap_next(vcpu->kvm, rmapp, spte);
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue