On 2021-01-26 11:36:49 -0600, Tom Lendacky wrote: > From: Tom Lendacky <thomas.lendacky@xxxxxxx> > > Update the sev_es_enabled() function return value to be based on the SEV > policy that has been specified. SEV-ES is enabled if SEV is enabled and > the SEV-ES policy bit is set in the policy object. > > Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx> > Cc: Richard Henderson <richard.henderson@xxxxxxxxxx> > Cc: Eduardo Habkost <ehabkost@xxxxxxxxxx> > Reviewed-by: Dr. David Alan Gilbert <dgilbert@xxxxxxxxxx> > Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx> Reviewed-by: Venu Busireddy <venu.busireddy@xxxxxxxxxx> > --- > target/i386/sev.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/target/i386/sev.c b/target/i386/sev.c > index badc141554..62ecc28cf6 100644 > --- a/target/i386/sev.c > +++ b/target/i386/sev.c > @@ -371,7 +371,7 @@ sev_enabled(void) > bool > sev_es_enabled(void) > { > - return false; > + return sev_enabled() && (sev_guest->policy & SEV_POLICY_ES); > } > > uint64_t > -- > 2.30.0 >