1 /* SPDX-License-Identifier: GPL-2.0-only */ 2 /* 3 * Copyright (C) 2016 ARM Ltd. 4 */ 5 #ifndef __ASM_PGTABLE_PROT_H 6 #define __ASM_PGTABLE_PROT_H 7 8 #include <asm/memory.h> 9 #include <asm/pgtable-hwdef.h> 10 11 #include <linux/const.h> 12 13 /* 14 * Software defined PTE bits definition. 15 */ 16 #define PTE_WRITE (PTE_DBM) /* same as DBM (51) */ 17 #define PTE_SWP_EXCLUSIVE (_AT(pteval_t, 1) << 2) /* only for swp ptes */ 18 #define PTE_DIRTY (_AT(pteval_t, 1) << 55) 19 #define PTE_SPECIAL (_AT(pteval_t, 1) << 56) 20 #define PTE_DEVMAP (_AT(pteval_t, 1) << 57) 21 22 /* 23 * PTE_PRESENT_INVALID=1 & PTE_VALID=0 indicates that the pte's fields should be 24 * interpreted according to the HW layout by SW but any attempted HW access to 25 * the address will result in a fault. pte_present() returns true. 26 */ 27 #define PTE_PRESENT_INVALID (PTE_NG) /* only when !PTE_VALID */ 28 29 #ifdef CONFIG_HAVE_ARCH_USERFAULTFD_WP 30 #define PTE_UFFD_WP (_AT(pteval_t, 1) << 58) /* uffd-wp tracking */ 31 #define PTE_SWP_UFFD_WP (_AT(pteval_t, 1) << 3) /* only for swp ptes */ 32 #else 33 #define PTE_UFFD_WP (_AT(pteval_t, 0)) 34 #define PTE_SWP_UFFD_WP (_AT(pteval_t, 0)) 35 #endif /* CONFIG_HAVE_ARCH_USERFAULTFD_WP */ 36 37 #define _PROT_DEFAULT (PTE_TYPE_PAGE | PTE_AF | PTE_SHARED) 38 39 #define PROT_DEFAULT (PTE_TYPE_PAGE | PTE_MAYBE_NG | PTE_MAYBE_SHARED | PTE_AF) 40 #define PROT_SECT_DEFAULT (PMD_TYPE_SECT | PMD_MAYBE_NG | PMD_MAYBE_SHARED | PMD_SECT_AF) 41 42 #define PROT_DEVICE_nGnRnE (PROT_DEFAULT | PTE_PXN | PTE_UXN | PTE_WRITE | PTE_ATTRINDX(MT_DEVICE_nGnRnE)) 43 #define PROT_DEVICE_nGnRE (PROT_DEFAULT | PTE_PXN | PTE_UXN | PTE_WRITE | PTE_ATTRINDX(MT_DEVICE_nGnRE)) 44 #define PROT_NORMAL_NC (PROT_DEFAULT | PTE_PXN | PTE_UXN | PTE_WRITE | PTE_ATTRINDX(MT_NORMAL_NC)) 45 #define PROT_NORMAL (PROT_DEFAULT | PTE_PXN | PTE_UXN | PTE_WRITE | PTE_ATTRINDX(MT_NORMAL)) 46 #define PROT_NORMAL_TAGGED (PROT_DEFAULT | PTE_PXN | PTE_UXN | PTE_WRITE | PTE_ATTRINDX(MT_NORMAL_TAGGED)) 47 48 #define PROT_SECT_DEVICE_nGnRE (PROT_SECT_DEFAULT | PMD_SECT_PXN | PMD_SECT_UXN | PMD_ATTRINDX(MT_DEVICE_nGnRE)) 49 #define PROT_SECT_NORMAL (PROT_SECT_DEFAULT | PMD_SECT_PXN | PMD_SECT_UXN | PTE_WRITE | PMD_ATTRINDX(MT_NORMAL)) 50 #define PROT_SECT_NORMAL_EXEC (PROT_SECT_DEFAULT | PMD_SECT_UXN | PMD_ATTRINDX(MT_NORMAL)) 51 52 #define _PAGE_DEFAULT (_PROT_DEFAULT | PTE_ATTRINDX(MT_NORMAL)) 53 54 #define _PAGE_KERNEL (PROT_NORMAL) 55 #define _PAGE_KERNEL_RO ((PROT_NORMAL & ~PTE_WRITE) | PTE_RDONLY) 56 #define _PAGE_KERNEL_ROX ((PROT_NORMAL & ~(PTE_WRITE | PTE_PXN)) | PTE_RDONLY) 57 #define _PAGE_KERNEL_EXEC (PROT_NORMAL & ~PTE_PXN) 58 #define _PAGE_KERNEL_EXEC_CONT ((PROT_NORMAL & ~PTE_PXN) | PTE_CONT) 59 60 #define _PAGE_SHARED (_PAGE_DEFAULT | PTE_USER | PTE_RDONLY | PTE_NG | PTE_PXN | PTE_UXN | PTE_WRITE) 61 #define _PAGE_SHARED_EXEC (_PAGE_DEFAULT | PTE_USER | PTE_RDONLY | PTE_NG | PTE_PXN | PTE_WRITE) 62 #define _PAGE_READONLY (_PAGE_DEFAULT | PTE_USER | PTE_RDONLY | PTE_NG | PTE_PXN | PTE_UXN) 63 #define _PAGE_READONLY_EXEC (_PAGE_DEFAULT | PTE_USER | PTE_RDONLY | PTE_NG | PTE_PXN) 64 #define _PAGE_EXECONLY (_PAGE_DEFAULT | PTE_RDONLY | PTE_NG | PTE_PXN) 65 66 #ifndef __ASSEMBLY__ 67 68 #include <asm/cpufeature.h> 69 #include <asm/pgtable-types.h> 70 #include <asm/rsi.h> 71 72 extern bool arm64_use_ng_mappings; 73 extern unsigned long prot_ns_shared; 74 75 #define PROT_NS_SHARED (is_realm_world() ? prot_ns_shared : 0) 76 77 #define PTE_MAYBE_NG (arm64_use_ng_mappings ? PTE_NG : 0) 78 #define PMD_MAYBE_NG (arm64_use_ng_mappings ? PMD_SECT_NG : 0) 79 80 #ifndef CONFIG_ARM64_LPA2 81 #define lpa2_is_enabled() false 82 #define PTE_MAYBE_SHARED PTE_SHARED 83 #define PMD_MAYBE_SHARED PMD_SECT_S 84 #else 85 static inline bool __pure lpa2_is_enabled(void) 86 { 87 return read_tcr() & TCR_DS; 88 } 89 90 #define PTE_MAYBE_SHARED (lpa2_is_enabled() ? 0 : PTE_SHARED) 91 #define PMD_MAYBE_SHARED (lpa2_is_enabled() ? 0 : PMD_SECT_S) 92 #endif 93 94 /* 95 * If we have userspace only BTI we don't want to mark kernel pages 96 * guarded even if the system does support BTI. 97 */ 98 #define PTE_MAYBE_GP (system_supports_bti_kernel() ? PTE_GP : 0) 99 100 #define PAGE_KERNEL __pgprot(_PAGE_KERNEL) 101 #define PAGE_KERNEL_RO __pgprot(_PAGE_KERNEL_RO) 102 #define PAGE_KERNEL_ROX __pgprot(_PAGE_KERNEL_ROX) 103 #define PAGE_KERNEL_EXEC __pgprot(_PAGE_KERNEL_EXEC) 104 #define PAGE_KERNEL_EXEC_CONT __pgprot(_PAGE_KERNEL_EXEC_CONT) 105 106 #define PAGE_S2_MEMATTR(attr, has_fwb) \ 107 ({ \ 108 u64 __val; \ 109 if (has_fwb) \ 110 __val = PTE_S2_MEMATTR(MT_S2_FWB_ ## attr); \ 111 else \ 112 __val = PTE_S2_MEMATTR(MT_S2_ ## attr); \ 113 __val; \ 114 }) 115 116 #define PAGE_NONE __pgprot(((_PAGE_DEFAULT) & ~PTE_VALID) | PTE_PRESENT_INVALID | PTE_RDONLY | PTE_NG | PTE_PXN | PTE_UXN) 117 /* shared+writable pages are clean by default, hence PTE_RDONLY|PTE_WRITE */ 118 #define PAGE_SHARED __pgprot(_PAGE_SHARED) 119 #define PAGE_SHARED_EXEC __pgprot(_PAGE_SHARED_EXEC) 120 #define PAGE_READONLY __pgprot(_PAGE_READONLY) 121 #define PAGE_READONLY_EXEC __pgprot(_PAGE_READONLY_EXEC) 122 #define PAGE_EXECONLY __pgprot(_PAGE_EXECONLY) 123 124 #endif /* __ASSEMBLY__ */ 125 126 #define pte_pi_index(pte) ( \ 127 ((pte & BIT(PTE_PI_IDX_3)) >> (PTE_PI_IDX_3 - 3)) | \ 128 ((pte & BIT(PTE_PI_IDX_2)) >> (PTE_PI_IDX_2 - 2)) | \ 129 ((pte & BIT(PTE_PI_IDX_1)) >> (PTE_PI_IDX_1 - 1)) | \ 130 ((pte & BIT(PTE_PI_IDX_0)) >> (PTE_PI_IDX_0 - 0))) 131 132 /* 133 * Page types used via Permission Indirection Extension (PIE). PIE uses 134 * the USER, DBM, PXN and UXN bits to to generate an index which is used 135 * to look up the actual permission in PIR_ELx and PIRE0_EL1. We define 136 * combinations we use on non-PIE systems with the same encoding, for 137 * convenience these are listed here as comments as are the unallocated 138 * encodings. 139 */ 140 141 /* 0: PAGE_DEFAULT */ 142 /* 1: PTE_USER */ 143 /* 2: PTE_WRITE */ 144 /* 3: PTE_WRITE | PTE_USER */ 145 /* 4: PAGE_EXECONLY PTE_PXN */ 146 /* 5: PAGE_READONLY_EXEC PTE_PXN | PTE_USER */ 147 /* 6: PTE_PXN | PTE_WRITE */ 148 /* 7: PAGE_SHARED_EXEC PTE_PXN | PTE_WRITE | PTE_USER */ 149 /* 8: PAGE_KERNEL_ROX PTE_UXN */ 150 /* 9: PAGE_GCS_RO PTE_UXN | PTE_USER */ 151 /* a: PAGE_KERNEL_EXEC PTE_UXN | PTE_WRITE */ 152 /* b: PAGE_GCS PTE_UXN | PTE_WRITE | PTE_USER */ 153 /* c: PAGE_KERNEL_RO PTE_UXN | PTE_PXN */ 154 /* d: PAGE_READONLY PTE_UXN | PTE_PXN | PTE_USER */ 155 /* e: PAGE_KERNEL PTE_UXN | PTE_PXN | PTE_WRITE */ 156 /* f: PAGE_SHARED PTE_UXN | PTE_PXN | PTE_WRITE | PTE_USER */ 157 158 #define _PAGE_GCS (_PAGE_DEFAULT | PTE_NG | PTE_UXN | PTE_WRITE | PTE_USER) 159 #define _PAGE_GCS_RO (_PAGE_DEFAULT | PTE_NG | PTE_UXN | PTE_USER) 160 161 #define PAGE_GCS __pgprot(_PAGE_GCS) 162 #define PAGE_GCS_RO __pgprot(_PAGE_GCS_RO) 163 164 #define PIE_E0 ( \ 165 PIRx_ELx_PERM(pte_pi_index(_PAGE_GCS), PIE_GCS) | \ 166 PIRx_ELx_PERM(pte_pi_index(_PAGE_GCS_RO), PIE_R) | \ 167 PIRx_ELx_PERM(pte_pi_index(_PAGE_EXECONLY), PIE_X_O) | \ 168 PIRx_ELx_PERM(pte_pi_index(_PAGE_READONLY_EXEC), PIE_RX_O) | \ 169 PIRx_ELx_PERM(pte_pi_index(_PAGE_SHARED_EXEC), PIE_RWX_O) | \ 170 PIRx_ELx_PERM(pte_pi_index(_PAGE_READONLY), PIE_R_O) | \ 171 PIRx_ELx_PERM(pte_pi_index(_PAGE_SHARED), PIE_RW_O)) 172 173 #define PIE_E1 ( \ 174 PIRx_ELx_PERM(pte_pi_index(_PAGE_GCS), PIE_NONE_O) | \ 175 PIRx_ELx_PERM(pte_pi_index(_PAGE_GCS_RO), PIE_NONE_O) | \ 176 PIRx_ELx_PERM(pte_pi_index(_PAGE_EXECONLY), PIE_NONE_O) | \ 177 PIRx_ELx_PERM(pte_pi_index(_PAGE_READONLY_EXEC), PIE_R) | \ 178 PIRx_ELx_PERM(pte_pi_index(_PAGE_SHARED_EXEC), PIE_RW) | \ 179 PIRx_ELx_PERM(pte_pi_index(_PAGE_READONLY), PIE_R) | \ 180 PIRx_ELx_PERM(pte_pi_index(_PAGE_SHARED), PIE_RW) | \ 181 PIRx_ELx_PERM(pte_pi_index(_PAGE_KERNEL_ROX), PIE_RX) | \ 182 PIRx_ELx_PERM(pte_pi_index(_PAGE_KERNEL_EXEC), PIE_RWX) | \ 183 PIRx_ELx_PERM(pte_pi_index(_PAGE_KERNEL_RO), PIE_R) | \ 184 PIRx_ELx_PERM(pte_pi_index(_PAGE_KERNEL), PIE_RW)) 185 186 #endif /* __ASM_PGTABLE_PROT_H */ 187