On Tue, Apr 01, 2025 at 09:01:51AM -0400, Xiaoyao Li wrote:
> Date: Tue,  1 Apr 2025 09:01:51 -0400
> From: Xiaoyao Li <xiaoyao...@intel.com>
> Subject: [PATCH v8 41/55] i386/apic: Skip kvm_apic_put() for TDX
> X-Mailer: git-send-email 2.34.1
> 
> KVM neithers allow writing to MSR_IA32_APICBASE for TDs, nor allow for
> KVM_SET_LAPIC[*].
> 
> Note, KVM_GET_LAPIC is also disallowed for TDX. It is called in the path
> 
>   do_kvm_cpu_synchronize_state()
>   -> kvm_arch_get_registers()
>      -> kvm_get_apic()
> 
> and it's already disllowed for confidential guest through
> guest_state_protected.
> 
> [*] https://lore.kernel.org/all/z3w4ku4jq0crt...@google.com/
> 
> Signed-off-by: Xiaoyao Li <xiaoyao...@intel.com>
> ---
> Changes in v8:
> - Fix the coding style; (Francesco)
> ---
>  hw/i386/kvm/apic.c | 5 +++++
>  1 file changed, 5 insertions(+)

Reviewed-by: Zhao Liu <zhao1....@intel.com>


Reply via email to