Re: [RFC 01/14] x86/apic: Add new driver for Secure AVIC
From: Borislav Petkov
Date: Wed Oct 09 2024 - 07:03:03 EST
On Wed, Oct 09, 2024 at 12:38:21PM +0200, Borislav Petkov wrote:
> On Wed, Oct 09, 2024 at 11:31:07AM +0530, Neeraj Upadhyay wrote:
> > Before this patch, if hypervisor enables Secure AVIC (reported in sev_status), guest would
> > terminate in snp_check_features().
>
> We want the guest to terminate at this patch too.
>
> The only case where the guest should not terminate is when the *full* sAVIC
> support is in. I.e., at patch 14.
I went and did a small C program doing all that - I see what you mean now
- you want to *enforce* the guest termination when SAVIC bit is not in
SNP_FEATURES_PRESENT.
Basically what I want you do to.
Please call that out in the commit message as it is important.
Thx.
--
Regards/Gruss,
Boris.
https://people.kernel.org/tglx/notes-about-netiquette