diff options
author | Andrea Parri (Microsoft) <[email protected]> | 2021-02-01 15:48:14 +0100 |
---|---|---|
committer | Wei Liu <[email protected]> | 2021-02-11 08:47:05 +0000 |
commit | 96854bbda24febe2cc9231e1f6ffbd3059dc57fc (patch) | |
tree | a5488cbdedb4e83910e8f2e09954535efc80e9aa /scripts/gdb/linux/tasks.py | |
parent | 7ef4b2f0d9adb73eb66e1f87f22953169c3dc7f8 (diff) |
hv_netvsc: Restrict configurations on isolated guests
Restrict the NVSP protocol version(s) that will be negotiated with the
host to be NVSP_PROTOCOL_VERSION_61 or greater if the guest is running
isolated. Moreover, do not advertise the SR-IOV capability and ignore
NVSP_MSG_4_TYPE_SEND_VF_ASSOCIATION messages in isolated guests, which
are not supposed to support SR-IOV. This reduces the footprint of the
code that will be exercised by Confidential VMs and hence the exposure
to bugs and vulnerabilities.
Signed-off-by: Andrea Parri (Microsoft) <[email protected]>
Acked-by: Jakub Kicinski <[email protected]>
Reviewed-by: Haiyang Zhang <[email protected]>
Cc: "David S. Miller" <[email protected]>
Cc: Jakub Kicinski <[email protected]>
Cc: [email protected]
Reviewed-by: Michael Kelley <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Wei Liu <[email protected]>
Diffstat (limited to 'scripts/gdb/linux/tasks.py')
0 files changed, 0 insertions, 0 deletions