rust-vmm / kvm-ioctls

Apache License 2.0
255 stars 103 forks source link

Add capabilities for pointer authentication #226

Closed bchalios closed 11 months ago

bchalios commented 1 year ago

Summary of the PR

ARMv8.3 introduces Pointer Authentication Code (PAC) as a mechanism to protect processes from attacks like buffer overflows.

This PR adds the capabilities for pointer authentication in Aarch64, KVM_CAP_ARM_PTRAUTH_GENERIC and KVM_CAP_ARM_PTRAUTH_ADDRESS. Also, add a unit test for checking the existence of capabilities and try to enable the feature in the vcpu initialization if present.

Requirements

Before submitting your PR, please make sure you addressed the following requirements: