On 21.08.2017 21:26, Jim Mattson wrote: > A guest may not be configured to support RDSEED, even when the host > does. If the guest does not support RDSEED, intercept the instruction > and synthesize #UD. Also clear the "allowed-1" bit for RDSEED exiting > in the IA32_VMX_PROCBASED_CTLS2 MSR. > > Signed-off-by: Jim Mattson <jmattson@xxxxxxxxxx> I'd really vote to update SECONDARY_EXEC_RDSEED -> SECONDARY_EXEC_RDSEED_EXITING SECONDARY_EXEC_RDRAND -> SECONDARY_EXEC_RDRAND_EXITING Otherwise this looks like it would enable RDSEED interpretation. And this way it matches the SDM definition. -- Thanks, David