Re: [PATCH v5 07/32] x86/mm: Add support to enable SME in early boot processing

From: Tom Lendacky
Date: Fri Apr 21 2017 - 17:41:28 EST


On 4/21/2017 9:55 AM, Borislav Petkov wrote:
On Tue, Apr 18, 2017 at 04:17:35PM -0500, Tom Lendacky wrote:
Add support to the early boot code to use Secure Memory Encryption (SME).
Since the kernel has been loaded into memory in a decrypted state, support
is added to encrypt the kernel in place and update the early pagetables

s/support is added to //

Done.

Thanks,
Tom


with the memory encryption mask so that new pagetable entries will use
memory encryption.