Re: [RFC PATCH v2 03/20] x86: Secure Memory Encryption (SME) build enablement

From: Borislav Petkov
Date: Fri Sep 02 2016 - 07:05:10 EST


On Mon, Aug 22, 2016 at 05:35:59PM -0500, Tom Lendacky wrote:
> Provide the Kconfig support to build the SME support in the kernel.
>
> Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
> ---
> arch/x86/Kconfig | 9 +++++++++
> 1 file changed, 9 insertions(+)
>
> diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig
> index c580d8c..131f329 100644
> --- a/arch/x86/Kconfig
> +++ b/arch/x86/Kconfig
> @@ -1357,6 +1357,15 @@ config X86_DIRECT_GBPAGES
> supports them), so don't confuse the user by printing
> that we have them enabled.
>
> +config AMD_MEM_ENCRYPT
> + bool "Secure Memory Encryption support for AMD"

"AMD Secure Memory Encryption support"

> + depends on X86_64 && CPU_SUP_AMD
> + ---help---
> + Say yes to enable the encryption of system memory. This requires
> + an AMD processor that supports Secure Memory Encryption (SME).
> + The encryption of system memory is disabled by default but can be
> + enabled with the mem_encrypt=on command line option.
> +
> # Common NUMA Features
> config NUMA
> bool "Numa Memory Allocation and Scheduler Support"

--
Regards/Gruss,
Boris.

ECO tip #101: Trim your mails when you reply.
--