On 21.08.2017 18:37, Jim Mattson wrote: > Right. If L1 doesn't support RDSEED, then the corresponding > "allowed-1" bit in the IA32_VMX_PROCBASED_CTLS2 MSR should be cleared. > I think vmx_cpuid_update is the right place for this. Note, however, > that prepare_vmcs02() should still respect L0's setting of this bit. > Right, now I also realize why you sent v2 (EXITING vs. !EXITING) :) -- Thanks, David