On Fri, Aug 7, 2020 at 1:46 AM Chenyi Qiang <chenyi.qiang@xxxxxxxxx> wrote: > > PKS(Protection Keys for Supervisor Pages) is a feature that extends the > Protection Key architecture to support thread-specific permission > restrictions on supervisor pages. > > A new PKS MSR(PKRS) is defined in kernel to support PKS, which holds a > set of permissions associated with each protection domian. > > Two VMCS fields {HOST,GUEST}_IA32_PKRS are introduced in > {host,guest}-state area to store the value of PKRS. > > Every VM exit saves PKRS into guest-state area. > If VM_EXIT_LOAD_IA32_PKRS = 1, VM exit loads PKRS from the host-state > area. > If VM_ENTRY_LOAD_IA32_PKRS = 1, VM entry loads PKRS from the guest-state > area. > > Signed-off-by: Chenyi Qiang <chenyi.qiang@xxxxxxxxx> Reviewed-by: Jim Mattson <jmattson@xxxxxxxxxx>