RE: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: "Hansen, Dave" <dave.hansen@xxxxxxxxx>, Brijesh Singh <brijesh.singh@xxxxxxx>, Peter Gonda <pgonda@xxxxxxxxxx>
Subject: RE: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
From: "Luck, Tony" <tony.luck@xxxxxxxxx>
Date: Tue, 23 Nov 2021 05:15:36 +0000
Accept-language: en-US
Cc: "x86@xxxxxxxxxx" <x86@xxxxxxxxxx>, "linux-kernel@xxxxxxxxxxxxxxx" <linux-kernel@xxxxxxxxxxxxxxx>, "kvm@xxxxxxxxxxxxxxx" <kvm@xxxxxxxxxxxxxxx>, "linux-coco@xxxxxxxxxxxxxxx" <linux-coco@xxxxxxxxxxxxxxx>, "linux-mm@xxxxxxxxx" <linux-mm@xxxxxxxxx>, "linux-crypto@xxxxxxxxxxxxxxx" <linux-crypto@xxxxxxxxxxxxxxx>, Thomas Gleixner <tglx@xxxxxxxxxxxxx>, "Ingo Molnar" <mingo@xxxxxxxxxx>, Joerg Roedel <jroedel@xxxxxxx>, Tom Lendacky <Thomas.Lendacky@xxxxxxx>, "H. Peter Anvin" <hpa@xxxxxxxxx>, Ard Biesheuvel <ardb@xxxxxxxxxx>, Paolo Bonzini <pbonzini@xxxxxxxxxx>, Sean Christopherson <seanjc@xxxxxxxxxx>, Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>, Wanpeng Li <wanpengli@xxxxxxxxxxx>, Jim Mattson <jmattson@xxxxxxxxxx>, Andy Lutomirski <luto@xxxxxxxxxx>, Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>, Sergio Lopez <slp@xxxxxxxxxx>, Peter Zijlstra <peterz@xxxxxxxxxxxxx>, Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>, David Rientjes <rientjes@xxxxxxxxxx>, Dov Murik <dovmurik@xxxxxxxxxxxxx>, Tobin Feldman-Fitzthum <tobin@xxxxxxx>, Borislav Petkov <bp@xxxxxxxxx>, Michael Roth <michael.roth@xxxxxxx>, Vlastimil Babka <vbabka@xxxxxxx>, "Kirill A . Shutemov" <kirill@xxxxxxxxxxxxx>, Andi Kleen <ak@xxxxxxxxxxxxxxx>, "marcorr@xxxxxxxxxx" <marcorr@xxxxxxxxxx>, "sathyanarayanan.kuppuswamy@xxxxxxxxxxxxxxx" <sathyanarayanan.kuppuswamy@xxxxxxxxxxxxxxx>
Dlp-product: dlpe-windows
Dlp-reaction: no-action
Dlp-version: 11.6.200.16
In-reply-to: <38282b0c-7eb5-6a91-df19-2f4cfa8549ce@intel.com>
References: <20210820155918.7518-1-brijesh.singh@amd.com> <CAMkAt6o0ySn1=iLYsH0LCnNARrUbfaS0cvtxB__y_d+Q6DUzfA@mail.gmail.com> <daf5066b-e89b-d377-ed8a-9338f1a04c0d@amd.com> <d673f082-9023-dafb-e42e-eab32a3ddd0c@intel.com> <f15597a0-e7e0-0a57-39fd-20715abddc7f@amd.com> <5f3b3aab-9ec2-c489-eefd-9136874762ee@intel.com> <d83e6668-bec4-8d1f-7f8a-085829146846@amd.com> <38282b0c-7eb5-6a91-df19-2f4cfa8549ce@intel.com>

> My preference would be that we never have SEV-SNP code in the kernel
> that can panic() the host from guest userspace.  If that means waiting
> until there's common guest unmapping infrastructure around, then I think
> we should wait.

Perhaps I'm missing some context ... but guests must NEVER be allowed to
panic the host.

-Tony

References:
- [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
  - From: Brijesh Singh
- Re: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
  - From: Peter Gonda
- Re: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
  - From: Brijesh Singh
- Re: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
  - From: Dave Hansen
- Re: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
  - From: Brijesh Singh
- Re: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
  - From: Dave Hansen
- Re: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
  - From: Brijesh Singh
- Re: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
  - From: Dave Hansen

Prev by Date: Re: [PATCH] MM: discard __GFP_ATOMIC
Next by Date: Re: [RFC PATCH] arch: arm64: introduce RODATA_FULL_USE_PTE_CONT
Previous by thread: Re: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
Next by thread: Re: [PATCH Part2 v5 00/45] Add AMD Secure Nested Paging (SEV-SNP) Hypervisor Support
Index(es):
- Date
- Thread

[Index of Archives] [Linux ARM Kernel] [Linux ARM] [Linux Omap] [Fedora ARM] [IETF Annouce] [Bugtraq] [Linux OMAP] [Linux MIPS] [eCos] [Asterisk Internet PBX] [Linux API]