On Wed, Sep 27, 2017 at 10:13:27AM -0500, Brijesh Singh wrote:
> KVM guest defines three per-CPU variables (steal-time, apf_reason, and
> avic_eio) which are shared between a guest and a hypervisor. When SEV
> is active, memory is encrypted with a guest-specific key, and if the
> guest OS wants to share the memory region with the hypervisor then it
> must clear the C-bit (i.e set decrypted) before sharing it.
>
> DEFINE_PER_CPU_DECRYPTED can be used to define the per-CPU variables
> which will be shared between a guest and a hypervisor.
>
> Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
> Cc: Ingo Molnar <mingo@xxxxxxxxxx>
> Cc: "H. Peter Anvin" <hpa@xxxxxxxxx>
> Cc: Borislav Petkov <bp@xxxxxxx>
> Cc: Arnd Bergmann <arnd@xxxxxxxx>
> Cc: Tejun Heo <tj@xxxxxxxxxx>
> Cc: Christoph Lameter <cl@xxxxxxxxx>
> Cc: linux-arch@xxxxxxxxxxxxxxx
> Cc: x86@xxxxxxxxxx
> Cc: linux-kernel@xxxxxxxxxxxxxxx
> Cc: Tom Lendacky <thomas.lendacky@xxxxxxx>
> Signed-off-by: Brijesh Singh <brijesh.singh@xxxxxxx>
> Acked-by: Tejun Heo <tj@xxxxxxxxxx>
> ---
> include/asm-generic/vmlinux.lds.h | 19 +++++++++++++++++++
> include/linux/percpu-defs.h | 15 +++++++++++++++
> 2 files changed, 34 insertions(+)
Reviewed-by: Borislav Petkov <bp@xxxxxxx>
--
Regards/Gruss,
Boris.
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)
--
