diff options
| author | Sean Christopherson <[email protected]> | 2023-05-03 09:08:37 -0700 |
|---|---|---|
| committer | Paolo Bonzini <[email protected]> | 2023-05-21 04:05:51 -0400 |
| commit | 275a87244ec8320e5d319132caa787329b04bb7e (patch) | |
| tree | 68ceab5a84e547e61444e201d53cf9912843bb43 /lib/crypto/mpi | |
| parent | ad45413d22e6a224f8530b6fcc9ac01c8ced7fd6 (diff) | |
KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM)
Drop KVM's manipulation of guest's CPUID.0x12.1 ECX and EDX, i.e. the
allowed XFRM of SGX enclaves, now that KVM explicitly checks the guest's
allowed XCR0 when emulating ECREATE.
Note, this could theoretically break a setup where userspace advertises
a "bad" XFRM and relies on KVM to provide a sane CPUID model, but QEMU
is the only known user of KVM SGX, and QEMU explicitly sets the SGX CPUID
XFRM subleaf based on the guest's XCR0.
Reviewed-by: Kai Huang <[email protected]>
Tested-by: Kai Huang <[email protected]>
Signed-off-by: Sean Christopherson <[email protected]>
Message-Id: <[email protected]>
Signed-off-by: Paolo Bonzini <[email protected]>
Diffstat (limited to 'lib/crypto/mpi')
0 files changed, 0 insertions, 0 deletions