Re: [PATCH] x86/coco/sev: Make SEV_STATUS available via SYSFS

[Borislav Petkov]

On Tue, Jun 23, 2026 at 09:38:20AM +0200, Jörg Rödel wrote:
> From: Joerg Roedel <joerg.roedel@xxxxxxx>
> 
> Current user-space tooling which needs access to the SEV_STATUS MSR is
> using the MSR module. The use of this module poses a security risk in
> any trusted execution environment and is generally discouraged.
> 
> Instead, provide an file in SYSFS in the /sys/devices/system/cpu/sev/
> directory to provide the value of the SEV_STATUS MSR to user-space.
> 
> Signed-off-by: Joerg Roedel <joerg.roedel@xxxxxxx>
> ---
>  Documentation/ABI/testing/sysfs-devices-system-cpu | 4 ++++
>  arch/x86/coco/sev/core.c                           | 8 ++++++++
>  2 files changed, 12 insertions(+)

Sashiko does have a point...

https://sashiko.dev/#/patchset/20260623073820.1479769-1-joro%408bytes.org

-- 
Regards/Gruss,
    Boris.

https://people.kernel.org/tglx/notes-about-netiquette