Perhaps this change to vmx_cpuid_update is too simplistic, and it should follow the pattern established for RDTSCP/INVPCID instead? On Mon, Aug 21, 2017 at 9:50 AM, David Hildenbrand <david@xxxxxxxxxx> wrote: > On 21.08.2017 18:37, Jim Mattson wrote: >> Right. If L1 doesn't support RDSEED, then the corresponding >> "allowed-1" bit in the IA32_VMX_PROCBASED_CTLS2 MSR should be cleared. >> I think vmx_cpuid_update is the right place for this. Note, however, >> that prepare_vmcs02() should still respect L0's setting of this bit. >> > > Right, now I also realize why you sent v2 (EXITING vs. !EXITING) :) > > > -- > > Thanks, > > David
