x86/sev: Allow non-VMPL0 execution when an SVSM is present

Browse source

To allow execution at a level other than VMPL0, an SVSM must be present.
Allow the SEV-SNP guest to continue booting if an SVSM is detected and
the hypervisor supports the SVSM feature as indicated in the GHCB
hypervisor features bitmap.

  [ bp: Massage a bit. ]

Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/r/2ce7cf281cce1d0cba88f3f576687ef75dc3c953.1717600736.git.thomas.lendacky@amd.com

...

This commit is contained in:

Tom Lendacky 2024-06-05 10:18:56 -05:00 • committed by Borislav Petkov (AMD)

parent 627dc67151

commit 99ef9f5984

3 changed files with 27 additions and 11 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

17

arch/x86/boot/compressed/sev.c

View file

1

arch/x86/include/asm/sev-common.h

View file

20

arch/x86/kernel/sev.c

View file