marcan changed the topic of #asahi to: Asahi Linux: porting Linux to Apple Silicon macs | General project discussion | GitHub: https://alx.sh/g | Wiki: https://alx.sh/w | Topics: #asahi-dev #asahi-re #asahi-gpu #asahi-offtopic | Keep things on topic | Logs: https://alx.sh/l/asahi
<marcan>
it's just the PPL hack but with hardware support
<marcan>
I like to think of it as the xbox 360 hypervisor
<marcan>
"put your page management code in a box and make it enforce codesigning"
<marcan>
it's not a terribly useful concept for linux, at least not used that way
<marcan>
that said, it might make sense to put crypt code and keys in there
<marcan>
e.g. for dm-crypt
<marcan>
but by definition to make use of it you need to move page table management in there too
<marcan>
and that's probably too intrusive
<mjg59_>
Windows does this now
<mjg59_>
Credential Guard puts all the OS creds in a separate sidecar VM, and there's also support for verifying drivers are signed before allocating memory for them
VinDuv has joined #asahi
VinDuv1 has joined #asahi
WhyNotHugo_ has joined #asahi
tomtastic_ has joined #asahi
bdju_ has joined #asahi
VinDuv has quit [*.net *.split]
tomtastic has quit [*.net *.split]
dhewg has quit [*.net *.split]
Gaelan has quit [*.net *.split]
WhyNotHugo has quit [*.net *.split]
jaXvi has quit [*.net *.split]
bdju has quit [*.net *.split]
marcan has quit [*.net *.split]
Behemoth has quit [*.net *.split]
Janhouse has quit [*.net *.split]
krzywix- has quit [*.net *.split]
coderobe has quit [*.net *.split]
jato has quit [*.net *.split]
kov has quit [*.net *.split]
dottedmag has quit [*.net *.split]
ml has quit [*.net *.split]
lethalbit has quit [*.net *.split]
WhyNotHugo_ is now known as WhyNotHugo
pthariensflame has joined #asahi
dhewg has joined #asahi
Gaelan has joined #asahi
jaXvi has joined #asahi
kov has joined #asahi
Behemoth has joined #asahi
ml has joined #asahi
lethalbit has joined #asahi
marcan has joined #asahi
jato has joined #asahi
coderobe has joined #asahi
krzywix- has joined #asahi
Janhouse has joined #asahi
dottedmag has joined #asahi
pthariensflame has quit [Client Quit]
ephe_meral1 has joined #asahi
ephe_meral1 has quit [Ping timeout: 268 seconds]
jeffmiw has joined #asahi
karlyeurl has quit [Ping timeout: 245 seconds]
karlyeurl has joined #asahi
foxlet has quit [*.net *.split]
uartman[m] has quit [*.net *.split]
LucasTorrobaHenn has quit [*.net *.split]
w0lfhead[m] has quit [*.net *.split]
fridtjof[m] has quit [*.net *.split]
d4ve[m] has quit [*.net *.split]
nyuhu has quit [*.net *.split]
bsandro has quit [Quit: Lost terminal]
foxlet has joined #asahi
w0lfhead[m] has joined #asahi
uartman[m] has joined #asahi
LucasTorrobaHenn has joined #asahi
nyuhu has joined #asahi
fridtjof[m] has joined #asahi
d4ve[m] has joined #asahi
m0drobert has left #asahi ["l8er"]
modrobert has joined #asahi
bdju_ is now known as bdju
riker77 has quit [Quit: Quitting IRC - gone for good...]
klaus has quit [Quit: Lost terminal]
riker77 has joined #asahi
raster has joined #asahi
choozy has joined #asahi
maknho__ has joined #asahi
maknho_ has quit [Ping timeout: 268 seconds]
<marcan>
mjg59_: it might make sense as an extension of something like nVHE KVM mode, except, whoops, that doesn't work on the M1
<marcan>
but really, if the kernel goes in that direction it might as well be an EL2/EL1 thing and not try to use any of this guarded exec stuff
<marcan>
it would never work in the VHE way of doing things though...