On Wed, Oct 09, 2024 at 12:38:21PM +0200, Borislav Petkov wrote: > On Wed, Oct 09, 2024 at 11:31:07AM +0530, Neeraj Upadhyay wrote: > > Before this patch, if hypervisor enables Secure AVIC (reported in sev_status), guest would > > terminate in snp_check_features(). > > We want the guest to terminate at this patch too. > > The only case where the guest should not terminate is when the *full* sAVIC > support is in. I.e., at patch 14. I went and did a small C program doing all that - I see what you mean now - you want to *enforce* the guest termination when SAVIC bit is not in SNP_FEATURES_PRESENT. Basically what I want you do to. Please call that out in the commit message as it is important. Thx. -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette