Re: [RFC 01/14] x86/apic: Add new driver for Secure AVIC

From: Neeraj Upadhyay
Date: Wed Oct 09 2024 - 08:38:59 EST




On 10/9/2024 4:32 PM, Borislav Petkov wrote:
> On Wed, Oct 09, 2024 at 12:38:21PM +0200, Borislav Petkov wrote:
>> On Wed, Oct 09, 2024 at 11:31:07AM +0530, Neeraj Upadhyay wrote:
>>> Before this patch, if hypervisor enables Secure AVIC (reported in sev_status), guest would
>>> terminate in snp_check_features().
>>
>> We want the guest to terminate at this patch too.
>>
>> The only case where the guest should not terminate is when the *full* sAVIC
>> support is in. I.e., at patch 14.
>
> I went and did a small C program doing all that - I see what you mean now
> - you want to *enforce* the guest termination when SAVIC bit is not in
> SNP_FEATURES_PRESENT.
>

Yes.

> Basically what I want you do to.
>

Cool!

> Please call that out in the commit message as it is important.
>

Sure, will update in next version. Thanks!


- Neeraj


> Thx.
>