On 5/16/2024 7:20 AM, Sean Christopherson wrote:
But again, I think it's just too overkill for TDX. We can just set the ZAP_LEAF_ONLY flag for the slot when it is created in KVM.Ya, I'm convinced that adding uAPI is overkill at this point.
+1. Making it configurable by userspace needs justification common enough.If it's just for TDX specific and mandatory for TDX, just make it KVM internal thing for TDX.
