mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs.git
synced 2026-11-06 01:26:56 +01:00
Carlos Bilbao
1f597b1a6e
Kernel developers working on confidential computing for virtualized environments in x86 operate under a set of assumptions regarding the Linux kernel threat model that differs from the traditional view. Historically, the Linux threat model acknowledges attackers residing in userspace, as well as a limited set of external attackers that are able to interact with the kernel through networking or limited HW-specific exposed interfaces (e.g. USB, thunderbolt). The goal of this document is to explain additional attack vectors that arise in the virtualized confidential computing space. Reviewed-by: Larry Dewey <[email protected]> Reviewed-by: David Kaplan <[email protected]> Co-developed-by: Elena Reshetova <[email protected]> Signed-off-by: Elena Reshetova <[email protected]> Signed-off-by: Carlos Bilbao <[email protected]> Message-ID: <[email protected]> Signed-off-by: Jonathan Corbet <[email protected]>