diff options
| author | Sean Christopherson <[email protected]> | 2021-04-12 16:21:39 +1200 |
|---|---|---|
| committer | Paolo Bonzini <[email protected]> | 2021-04-20 04:18:55 -0400 |
| commit | 70210c044b4ea8f05e93ec62abc30cab4233ec88 (patch) | |
| tree | 7bb3f6ae58f87e6074d1f5f134f361d10b86582e /tools/perf/scripts/python/bin | |
| parent | 9798adbc04cf1b14325dc7e2c882639693516a69 (diff) | |
KVM: VMX: Add SGX ENCLS[ECREATE] handler to enforce CPUID restrictions
Add an ECREATE handler that will be used to intercept ECREATE for the
purpose of enforcing and enclave's MISCSELECT, ATTRIBUTES and XFRM, i.e.
to allow userspace to restrict SGX features via CPUID. ECREATE will be
intercepted when any of the aforementioned masks diverges from hardware
in order to enforce the desired CPUID model, i.e. inject #GP if the
guest attempts to set a bit that hasn't been enumerated as allowed-1 in
CPUID.
Note, access to the PROVISIONKEY is not yet supported.
Signed-off-by: Sean Christopherson <[email protected]>
Co-developed-by: Kai Huang <[email protected]>
Signed-off-by: Kai Huang <[email protected]>
Message-Id: <c3a97684f1b71b4f4626a1fc3879472a95651725.1618196135.git.kai.huang@intel.com>
Signed-off-by: Paolo Bonzini <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/bin')
0 files changed, 0 insertions, 0 deletions