From: Borislav Petkov <bp@xxxxxxxxx> Sent: Tuesday, February 7, 2023 11:33 AM > > On Tue, Feb 07, 2023 at 07:01:25PM +0000, Michael Kelley (LINUX) wrote: > > Unless there are objections, I'll go with CC_ATTR_PARAVISOR_DEVICES, > > What does "DEVICES" mean in this context? > > You need to think about !virt people too who are already confused by the > word "paravisor". :-) > Maybe I misunderstood your previous comment about "Either 1". We can avoid "PARAVISOR" entirely by going with two attributes: CC_ATTR_ACCESS_IOAPIC_ENCRYPTED CC_ATTR_ACCESS_TPM_ENCRYPTED These are much more specific, and relatively short, and having two allows decoupling the handling of the IO-APIC and TPM. Combining into the single CC_ATTR_ACCESS_IOAPIC_AND_TPM_ENCRYPTED also works but is longer. Capturing the full meaning in the string names is probably impossible. Referring to the comment for the definition will be required for a full understanding. Michael
