From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753509AbcIBLFG (ORCPT ); Fri, 2 Sep 2016 07:05:06 -0400 Received: from mail.skyhub.de ([78.46.96.112]:51949 "EHLO mail.skyhub.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751190AbcIBLE6 (ORCPT ); Fri, 2 Sep 2016 07:04:58 -0400 Date: Fri, 2 Sep 2016 13:03:51 +0200 From: Borislav Petkov To: Tom Lendacky Cc: linux-arch@vger.kernel.org, linux-efi@vger.kernel.org, kvm@vger.kernel.org, linux-doc@vger.kernel.org, x86@kernel.org, linux-kernel@vger.kernel.org, kasan-dev@googlegroups.com, linux-mm@kvack.org, iommu@lists.linux-foundation.org, Radim =?utf-8?B?S3LEjW3DocWZ?= , Arnd Bergmann , Jonathan Corbet , Matt Fleming , Joerg Roedel , Konrad Rzeszutek Wilk , Andrey Ryabinin , Ingo Molnar , Andy Lutomirski , "H. Peter Anvin" , Paolo Bonzini , Alexander Potapenko , Thomas Gleixner , Dmitry Vyukov Subject: Re: [RFC PATCH v2 03/20] x86: Secure Memory Encryption (SME) build enablement Message-ID: <20160902110351.GA22559@nazgul.tnic> References: <20160822223529.29880.50884.stgit@tlendack-t1.amdoffice.net> <20160822223559.29880.1502.stgit@tlendack-t1.amdoffice.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20160822223559.29880.1502.stgit@tlendack-t1.amdoffice.net> User-Agent: Mutt/1.6.0 (2016-04-01) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Aug 22, 2016 at 05:35:59PM -0500, Tom Lendacky wrote: > Provide the Kconfig support to build the SME support in the kernel. > > Signed-off-by: Tom Lendacky > --- > arch/x86/Kconfig | 9 +++++++++ > 1 file changed, 9 insertions(+) > > diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig > index c580d8c..131f329 100644 > --- a/arch/x86/Kconfig > +++ b/arch/x86/Kconfig > @@ -1357,6 +1357,15 @@ config X86_DIRECT_GBPAGES > supports them), so don't confuse the user by printing > that we have them enabled. > > +config AMD_MEM_ENCRYPT > + bool "Secure Memory Encryption support for AMD" "AMD Secure Memory Encryption support" > + depends on X86_64 && CPU_SUP_AMD > + ---help--- > + Say yes to enable the encryption of system memory. This requires > + an AMD processor that supports Secure Memory Encryption (SME). > + The encryption of system memory is disabled by default but can be > + enabled with the mem_encrypt=on command line option. > + > # Common NUMA Features > config NUMA > bool "Numa Memory Allocation and Scheduler Support" -- Regards/Gruss, Boris. ECO tip #101: Trim your mails when you reply. -- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Borislav Petkov Subject: Re: [RFC PATCH v2 03/20] x86: Secure Memory Encryption (SME) build enablement Date: Fri, 2 Sep 2016 13:03:51 +0200 Message-ID: <20160902110351.GA22559@nazgul.tnic> References: <20160822223529.29880.50884.stgit@tlendack-t1.amdoffice.net> <20160822223559.29880.1502.stgit@tlendack-t1.amdoffice.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: <20160822223559.29880.1502.stgit-qCXWGYdRb2BnqfbPTmsdiZQ+2ll4COg0XqFh9Ls21Oc@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: iommu-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: iommu-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: Tom Lendacky Cc: linux-efi-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, kvm-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, Radim =?utf-8?B?S3LEjW3DocWZ?= , Matt Fleming , x86-DgEjT+Ai2ygdnm+yROfE0A@public.gmane.org, linux-mm-Bw31MaZKKs3YtjvyW6yDsg@public.gmane.org, Alexander Potapenko , "H. Peter Anvin" , linux-arch-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, Jonathan Corbet , linux-doc-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, kasan-dev-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org, Ingo Molnar , Andrey Ryabinin , Arnd Bergmann , Andy Lutomirski , Thomas Gleixner , Dmitry Vyukov , linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, iommu-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org, Paolo Bonzini List-Id: linux-efi@vger.kernel.org On Mon, Aug 22, 2016 at 05:35:59PM -0500, Tom Lendacky wrote: > Provide the Kconfig support to build the SME support in the kernel. > > Signed-off-by: Tom Lendacky > --- > arch/x86/Kconfig | 9 +++++++++ > 1 file changed, 9 insertions(+) > > diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig > index c580d8c..131f329 100644 > --- a/arch/x86/Kconfig > +++ b/arch/x86/Kconfig > @@ -1357,6 +1357,15 @@ config X86_DIRECT_GBPAGES > supports them), so don't confuse the user by printing > that we have them enabled. > > +config AMD_MEM_ENCRYPT > + bool "Secure Memory Encryption support for AMD" "AMD Secure Memory Encryption support" > + depends on X86_64 && CPU_SUP_AMD > + ---help--- > + Say yes to enable the encryption of system memory. This requires > + an AMD processor that supports Secure Memory Encryption (SME). > + The encryption of system memory is disabled by default but can be > + enabled with the mem_encrypt=on command line option. > + > # Common NUMA Features > config NUMA > bool "Numa Memory Allocation and Scheduler Support" -- Regards/Gruss, Boris. ECO tip #101: Trim your mails when you reply. --