test_320_config_arm_pan from ubuntu_qrt_kernel_security failed on F-oracle-5.4 / H-oracle-5.11 ARM64

[Po-Hsu Lin]

Issue found on 5.11.0-1015.16~20.04.1 with instance VM.Standard.A1.Flex-4c.8m

  ======================================================================
  FAIL: test_320_config_arm_pan (__main__.KernelSecurityConfigTest)
  Ensure PAN for arm processors is set
  ----------------------------------------------------------------------
  Traceback (most recent call last):
    File "./test-kernel-security.py", line 2756, in test_320_config_arm_pan
      self.assertKernelConfig(config_name, expected)
    File "./test-kernel-security.py", line 214, in assertKernelConfig
      self.assertKernelConfigSet(name)
    File "./test-kernel-security.py", line 201, in assertKernelConfigSet
      '%s option was expected to be set in the kernel config' % name)
  AssertionError: ARM64_SW_TTBR0_PAN option was expected to be set in the kernel config

  ----------------------------------------------------------------------
  Ran 125 tests in 26.030s

  FAILED (failures=1)

[Po-Hsu Lin (cypressyew)]

Also spotted on B-oracle-5.4 with arm64 instance VM.Standard.A1.Flex-4c.8m
5.4.0-1053.57~18.04.1

[Po-Hsu Lin (cypressyew)]

Found on F-oracle-5.4.0-1054.58 / H-oracle-5.11.0-1017.18 on Oracle instance VM.Standard.A1.Flex-4c.8m only.

[Luke Nowakowski-Krijger (lukenow)]

Observed on B/oracle 5.4.0-1054.58~18.04.1 with same instance problem on VM.Standard.A1.Flex-4c.8m

[Dimitri John Ledkov (xnox)]

Imho we must enabled it, especially for Oracle, since compute nodes may be shared between multiple tenants.

It would be also interesting to check if the hardware used with this kernel does not have errata / issues discussed in https://www.spinics.net/lists/arm-kernel/msg788470.html i.e. that it disables this protection anyway.

[Brian Murray (brian-murray)]

The Hirsute Hippo has reached End of Life, so this bug will not be fixed for that release.