x86, cpufeature: Add cpufeature flag for SMEP
authorFenghua Yu <fenghua.yu@intel.com>
Wed, 18 May 2011 01:44:26 +0000 (18:44 -0700)
committerH. Peter Anvin <hpa@linux.intel.com>
Wed, 18 May 2011 03:56:59 +0000 (20:56 -0700)
commitd0281a257f370b09c410e466571858b4e12869c9
tree87d48822fbbf0325fdd140d1bcd868ad8c230456
parent724a92ee45c04cb9d82884a856b03b1e594d9de1
x86, cpufeature: Add cpufeature flag for SMEP

Add support for newly documented SMEP (Supervisor Mode Execution Protection) CPU
feature flag.

SMEP prevents the CPU in kernel-mode to jump to an executable page
that has the user flag set in the PTE.  This prevents the kernel from
executing user-space code accidentally or maliciously, so it for
example prevents kernel exploits from jumping to specially prepared
user-mode shell code.

[ hpa: added better description by Ingo Molnar ]

Signed-off-by: Fenghua Yu <fenghua.yu@intel.com>
LKML-Reference: <1305683069-25394-2-git-send-email-fenghua.yu@intel.com>
Signed-off-by: H. Peter Anvin <hpa@linux.intel.com>
arch/x86/include/asm/cpufeature.h