On Mon, Mar 20, 2017 at 08:57:38PM -0600, Mike Larkin wrote: > CVSROOT: /cvs > Module name: src > Changes by: mlar...@cvs.openbsd.org 2017/03/20 20:57:38 > > Modified files: > sys/arch/amd64/amd64: vmm.c > > Log message: > Don't allow the guest to clear CR0_NE or CR4_VMXE. While we should be > using the "must be clear / must be set" masks for these registers, I'd > like to know (for now) when guest VMs manipulate bits in these registers > in an unexpected way. This is needed for Linux guests, as they > unconditionally set CR0 without NE, and CR4 without VMXE. >
This was also ok deraadt@
