On Sun, Sep 18, 2022 at 12:04 PM Borislav Petkov <bp@xxxxxxxxx> wrote: > > On Fri, Sep 16, 2022 at 10:33:29PM +0000, Sean Christopherson wrote: > > ... > > Either way, KVM appears to be carrying a half-baked "fix" for a buggy guest that's > > long since gone. So like we did in commit 8805875aa473 ("Revert "KVM: nVMX: Do not > > expose MPX VMX controls when guest MPX disabled""), I think we should just revert > > the "fix". > > If, as message 0/5 says, setting this bit so that SLE11 Xen 4.0 boots as > a nested hypervisor is the use case, then sure, unconditional NO_LSMLE > and we all should go on with our lives. Fantastic! That's what I'll do in V2.