Re: [PATCH] target/i386: do not set unsupported VMX secondary execution controls

[Vitaly Kuznetsov]

"Dr. David Alan Gilbert" <dgilb...@redhat.com> writes:

> So you would think that would tkae care of RDSEED exiting - but what
> about VMCS shadowing?
>

SECONDARY_EXEC_SHADOW_VMCS is special, we are able to emulate it in KVM
even when it is not supported by hardware, see
nested_vmx_setup_ctls_msrs():

        /*
         * We can emulate "VMCS shadowing," even if the hardware
         * doesn't support it.
         */
        msrs->secondary_ctls_high |=
                SECONDARY_EXEC_SHADOW_VMCS;

-- 
Vitaly