[PATCH v4 5/5] x86/sev-es: Do not support MMIO to/from encrypted memory

2020-10-28 Thread Joerg Roedel
From: Joerg Roedel MMIO memory is usually not mapped encrypted, so there is no reason to support emulated MMIO when it is mapped encrypted. Prevent a possible hypervisor attack where a RAM page is mapped as an MMIO page in the nested page-table, so that any guest access to it will trigger a #VC

Re: [PATCH v4 5/5] x86/sev-es: Do not support MMIO to/from encrypted memory

2020-10-28 Thread Tom Lendacky
On 10/28/20 11:46 AM, Joerg Roedel wrote: > From: Joerg Roedel > > MMIO memory is usually not mapped encrypted, so there is no reason to > support emulated MMIO when it is mapped encrypted. > > Prevent a possible hypervisor attack where a RAM page is mapped as > an MMIO page in the nested