On Fri, Sep 16, 2022 at 10:33:29PM +0000, Sean Christopherson wrote: > ... > Either way, KVM appears to be carrying a half-baked "fix" for a buggy guest that's > long since gone. So like we did in commit 8805875aa473 ("Revert "KVM: nVMX: Do not > expose MPX VMX controls when guest MPX disabled""), I think we should just revert > the "fix". If, as message 0/5 says, setting this bit so that SLE11 Xen 4.0 boots as a nested hypervisor is the use case, then sure, unconditional NO_LSMLE and we all should go on with our lives. -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette