[PATCH 0/7] Alternate Injection: Secure Interrupt Delivery for SEV-SNP Guests - Guest Support

[Melody Wang]

Alternate Injection is a method to provide secure interrupt delivery for
SEV-SNP guests against malicious injection attacks. By handing over the
control of the interrupt injection to the guest itself, the security is
applied. Alternate Injection use Secure VM Service Module (SVSM), and APIC
emulation in the SVSM to secure interrupt delivery.

This is the guest side patches. The patch set includes the following:
1. Add support for enabling Alternate Injection.
2. Add support for the SVSM APIC protocol which uses a subset of the
   X2APIC MSRs.
3. Add support to allow the guest OS to request Alternate
   Injection.

Thanks,
Melody

Melody Wang (7):
  x86/sev: Add support for Alternate Injection
  x86/apic: Add an SVSM APIC driver
  x86/sev: Allow the guest to configure interrupt vectors for the
    hypervisor
  x86/sev: Route unsupported APIC register accesses to the hypervisor
    APIC emulation
  x86/sev: Add a function to contain all SEV-specific setup operations
  x86/sev: Register the guest with the SVSM APIC protocol
  x86/sev: Indicate that Alternate Injection is supported in the guest

 arch/x86/Kconfig                        |  14 ++
 arch/x86/boot/compressed/sev.c          |  37 +++-
 arch/x86/boot/compressed/sev.h          |   6 +
 arch/x86/boot/startup/sev-startup.c     |  15 ++
 arch/x86/boot/startup/sme.c             |   3 +
 arch/x86/coco/core.c                    |   3 +
 arch/x86/coco/sev/core.c                |  14 +-
 arch/x86/coco/sev/svsm.c                |   6 +
 arch/x86/include/asm/cpufeatures.h      |   1 +
 arch/x86/include/asm/msr-index.h        |   4 +-
 arch/x86/include/asm/sev-common.h       |   1 +
 arch/x86/include/asm/sev.h              |  29 ++-
 arch/x86/kernel/apic/Makefile           |   1 +
 arch/x86/kernel/apic/svsm_apic.c        | 255 ++++++++++++++++++++++++
 arch/x86/kernel/apic/x2apic_savic.c     |   8 +-
 drivers/firmware/efi/libstub/x86-stub.c |  20 +-
 include/linux/cc_platform.h             |   8 +
 17 files changed, 392 insertions(+), 33 deletions(-)
 create mode 100644 arch/x86/kernel/apic/svsm_apic.c

-- 
2.43.0