Commit 0097f9df authored by Paolo Bonzini's avatar Paolo Bonzini
Browse files

Merge tag 'kvm-x86-svm-6.17' of https://github.com/kvm-x86/linux into HEAD 

KVM SVM changes for 6.17

Drop KVM's rejection of SNP's SMT and single-socket policy restrictions, and
instead rely on firmware to verify that the policy can actually be supported.
Don't bother checking that requested policy(s) can actually be satisfied, as
an incompatible policy doesn't put the kernel at risk in any way, and providing
guarantees with respect to the physical topology is outside of KVM's purview.
parents b4733cd5 24be2b79

arch/x86/kvm/svm/sev.c

+1 −5
Original line number Diff line number Diff line
@@ -2135,11 +2135,7 @@ static int snp_launch_start(struct kvm *kvm, struct kvm_sev_cmd *argp) 
		return -EINVAL;



	/* Check for policy bits that must be set */

	if (!(params.policy & SNP_POLICY_MASK_RSVD_MBO) ||

	    !(params.policy & SNP_POLICY_MASK_SMT))

		return -EINVAL;



	if (params.policy & SNP_POLICY_MASK_SINGLE_SOCKET)

	if (!(params.policy & SNP_POLICY_MASK_RSVD_MBO))

		return -EINVAL;



	sev->policy = params.policy;