From nobody Tue Jan 13 16:27:25 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4drF5T6Lprz6NMtP for ; Tue, 13 Jan 2026 16:27:25 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4drF5T3zK5z3Klh for ; Tue, 13 Jan 2026 16:27:25 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768321645; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=1JanbJTKRrCZnhf7//4llnwLP9QwoCQ/pPyzOyyAmug=; b=mDBFKo+9Oh+6ARGjWyIVn/WjIfyrL5wwQxhX4vjzjwihUgQqP/WyvwZh2CZdQPfJg3U8aS DndYp/ZLFki5kFFEOUUryQSSo29qqCWQjHwr1vSlhvFnjYW2IIz0Wy+8OrO9c1upG1iNVf FltYVSF2ihZT9H5+BVVdP+6ENow6zdM8UcehlUQ/NOYcWI/CYeDa/ldDRis3RyyBpu7uLm VQWsmC5ANfaEzzheM0013Gy63/DGnTm16A+AbZXqIyBRWncppQu1zTJv7u6VIjwzAJSpSB 99cMlibC7uy7LDPhaGrxZi3RH2QafWhguqguLWLy99r+rBt42Y9bk1KL2mOA6w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768321645; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=1JanbJTKRrCZnhf7//4llnwLP9QwoCQ/pPyzOyyAmug=; b=qwSMoytK6lE9cAMQT2iMmO9khLHCXTlkO7tpCODTl1v4ZV6TPngPJWwckndSMjeRxgxnoJ S63O0B4UUFXCBewzgx5IoleXBXhVzqDclffd4/dOjvu/T9pWT2BDcLeV98RgeDQhPWGvjf 4FX0C+vjDPe8RXAvQ0Wz93m2n8B96OHy1O5TP9NbpeBHOdt8VouG5JPdrSx3xR5d29KS9v UyTwBsI5dNAFkX0E3plrsb1upVfCbWQ+CklXhxQowg4gWdELQX35ea76ywIvRqxaLGvfVd lB4/JVFvWqZ10XzEXkUd+AvmSeKoil8Jq8N2iXP89i0msWo+uy6hSn8JXBMy5g== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1768321645; a=rsa-sha256; cv=none; b=Ofx5NGftFjWjgZjfKkVNqCG1LejBjuAERCgj5Xl5HYI1YLsBJEaSd5YhxDkQj62u0CeO5P X/tEYKwTKtgYvJpRscKYuxWe6BFEtIfRWiXI99+AgSUXh4XHzutUakR9rAxsW2sLniSiOF v/ruG1dqv1xa2TVU2yF51JIi8NPFTrfM9Jte9jXIu4Xo3kOE2xyEMQ0nRnsl8cJi85ggxg 20/2zf81UkVZT1lydm/apqWYFSDwEulcajPdEa1TdPNXuv7qCwvjnFxeaTgVdGpQDoARpv 8TOdTlX9BfN0jFRF91Fre7GNhMeMSCPGnknLBX4PcVe9+LqTEKEdonIWAkIWbw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4drF5T2qdRz43y for ; Tue, 13 Jan 2026 16:27:25 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 31309 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Tue, 13 Jan 2026 16:27:25 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Andrew Turner Subject: git: f7a1a16225a2 - stable/15 - arm64: Add table attributes to the EFI maps List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: andrew X-Git-Repository: src X-Git-Refname: refs/heads/stable/15 X-Git-Reftype: branch X-Git-Commit: f7a1a16225a268ed787f5d7d6e8a00c569beab32 Auto-Submitted: auto-generated Date: Tue, 13 Jan 2026 16:27:25 +0000 Message-Id: <6966726d.31309.3a0de7e6@gitrepo.freebsd.org> The branch stable/15 has been updated by andrew: URL: https://cgit.FreeBSD.org/src/commit/?id=f7a1a16225a268ed787f5d7d6e8a00c569beab32 commit f7a1a16225a268ed787f5d7d6e8a00c569beab32 Author: Andrew Turner AuthorDate: 2025-09-26 15:06:58 +0000 Commit: Andrew Turner CommitDate: 2026-01-13 14:06:19 +0000 arm64: Add table attributes to the EFI maps Use table attributes to also limit unprivileged access to the EFI runtime mappings. This is mostly for parity with pmap as this is never mapped while userspace could execute. Reviewed by: tuexen Sponsored by: Arm Ltd Differential Revision: https://reviews.freebsd.org/D52751 (cherry picked from commit 2554148bd85b172afcc1431df3272f920c82ebce) --- sys/arm64/arm64/efirt_machdep.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/sys/arm64/arm64/efirt_machdep.c b/sys/arm64/arm64/efirt_machdep.c index f814d45f5dd0..bde0d4f784dc 100644 --- a/sys/arm64/arm64/efirt_machdep.c +++ b/sys/arm64/arm64/efirt_machdep.c @@ -106,7 +106,8 @@ efi_1t1_l3(vm_offset_t va) if (*l0 == 0) { m = efi_1t1_page(); mphys = VM_PAGE_TO_PHYS(m); - *l0 = PHYS_TO_PTE(mphys) | L0_TABLE; + *l0 = PHYS_TO_PTE(mphys) | TATTR_UXN_TABLE | + TATTR_AP_TABLE_NO_EL0 | L0_TABLE; } else { mphys = PTE_TO_PHYS(*l0); } @@ -117,7 +118,8 @@ efi_1t1_l3(vm_offset_t va) if (*l1 == 0) { m = efi_1t1_page(); mphys = VM_PAGE_TO_PHYS(m); - *l1 = PHYS_TO_PTE(mphys) | L1_TABLE; + *l1 = PHYS_TO_PTE(mphys) | TATTR_UXN_TABLE | + TATTR_AP_TABLE_NO_EL0 | L1_TABLE; } else { mphys = PTE_TO_PHYS(*l1); } @@ -128,7 +130,8 @@ efi_1t1_l3(vm_offset_t va) if (*l2 == 0) { m = efi_1t1_page(); mphys = VM_PAGE_TO_PHYS(m); - *l2 = PHYS_TO_PTE(mphys) | L2_TABLE; + *l2 = PHYS_TO_PTE(mphys) | TATTR_UXN_TABLE | + TATTR_AP_TABLE_NO_EL0 | L2_TABLE; } else { mphys = PTE_TO_PHYS(*l2); }