From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754445AbdCBPwe (ORCPT ); Thu, 2 Mar 2017 10:52:34 -0500 Received: from mail-sn1nam01on0085.outbound.protection.outlook.com ([104.47.32.85]:3554 "EHLO NAM01-SN1-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1752444AbdCBPwQ (ORCPT ); Thu, 2 Mar 2017 10:52:16 -0500 Authentication-Results: vger.kernel.org; dkim=none (message not signed) header.d=none;vger.kernel.org; dmarc=none action=none header.from=amd.com; Subject: [RFC PATCH v2 01/32] x86: Add the Secure Encrypted Virtualization CPU feature From: Brijesh Singh To: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , Date: Thu, 2 Mar 2017 10:12:09 -0500 Message-ID: <148846752953.2349.17505492128445909591.stgit@brijesh-build-machine> In-Reply-To: <148846752022.2349.13667498174822419498.stgit@brijesh-build-machine> References: <148846752022.2349.13667498174822419498.stgit@brijesh-build-machine> User-Agent: StGit/0.17.1-dirty MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-Originating-IP: [165.204.77.1] X-ClientProxiedBy: BN6PR03CA0054.namprd03.prod.outlook.com (10.173.137.16) To BN6PR12MB1604.namprd12.prod.outlook.com (10.172.22.23) X-MS-Office365-Filtering-Correlation-Id: 934e9342-eca0-4e7e-8160-08d4617e82c4 X-MS-Office365-Filtering-HT: Tenant X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(48565401081);SRVR:BN6PR12MB1604; X-Microsoft-Exchange-Diagnostics: 1;BN6PR12MB1604;3:WQg19jqZqZSrZqPH95/7BqXpIg0TL7WrEWHG+TkNiZHKu51Lb+B/3aZQhhVg8QgzDx0M1NOe+EEd1I94Y86rrl7zh6l0g1PaV5/9dwviWeU9oWBoMAI0FHxKZe2j5gRb5i8swKMiDrv1X+wkRIGJSOIGn+ScwRdTyxo2pfh+uueEag0/Hy9d19HPZwolzQJrH5AISq2B6K8+SUXj9BbbjVwiYoUEcszaSmNiDQ7Nqq8Fv0qIr0vljaWs+UyVBIp6Cu7BemDD6V2S3uR1ablJPsdDhy2VzsLAqmEpk278LtM=;25:RdRY9OI7EuEz7S6XI5rLgiWluFkchep19ykEBqLh7NdLNMDQc+oXUvUZdUmKZEhvOVsIx1c3rEgiAMU4KF7Ut55b1WbO8AFki2rkZ/ZnjHdSdsXJwItUHs3syRSxF1iIEW8l0lBoZbowb90irtNVPZM4DslmPCXrVBxHwPlnfqjMFhOT5fQ0JCSFo9MG61+gtrOayuB4gp7+omXn4RmAHvJr5jPpSII/FX/XMifgAA6cXumdVu5c217aN8q2U/39jdQiq34gelBiNu4WziSJdSdu4VAXz1LV95U2QjzetOe64p+FcgeM0xMLsFlADznCWTcvQllbPTrQTgxnbGv4+wYodv6XA573sShx/0kvqjisYT7X4wx40uTqPd2auBHt9xvLHP8Kps4N1nuCs3rgbCnEavtpq6RCx10koCk+5eJ+cqLOYEY0rNp6hlJohICZTXzg9CRkXeAkrqdtNK6NTQ== X-Microsoft-Exchange-Diagnostics: 1;BN6PR12MB1604;31:dH8coCTmq88WgYPp3A2tu3SEAo8eK1xw6PHZp/189WJ5VJwjbor+NUiMUHJq51GtkR1dTOgq9QA3REW8p3entH8k5vwjSdUf0RgzTaT1GiVdDjvzLOl1mttlRlC1N5p4FbuM/rO5SlzSOVy50x8Sx8V91JluNDAan3PgZNejavC12tnyUf6vhx9+lgzAUVPm0Hu/7FBWaNVrkY01j4nA4HouoFpiaQ2EO7nMQjTHmAo=;20:3UcaN3msAaF3gngzvL6T5QypsVmthxyVvC+SzygNVnNygty7U2X8hRxt1/laMG+3EPkNNMqbrG41aWsBuE50A/hu4U8w6ON0YVPkz8kj6LopXrGnYElAnP3ZCIOButi69IY557IwdNniT6o+bg2AsEaKPJSjYy5XFvxHcbU9XAdDsySUfdJh0BJ/wA5eb3YlCYP8Ggw3gMFl56Q/Plkb9vlU129M8/VYaNHeNzVtBtVhyXKkJ/YwGFXD0uQiddWAgrz8yKF5SzOmH7R0cKPA0mXry4bv3fIKaeAA0MPibHmHhP3QksXtth2NX2OWx8nWwB9Ua3+mxf+21IEEk00Ga7QajYV9j0XpBJK69znBv4namOl5Cee2yXib+AGNYyMFfrNR/p0roVAQUDdecqrBFtTsdBYs0yD1Hr4iqahstfu3BxjrXULaVZXiIzAVFXmOeg2WdbQFP+pmjT/szqg1rNGNRw+qpYmC831XvA5SxUy0bj+FcmeOoFTZq0SNCgEH X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(767451399110)(211171220733660); X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(6040375)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(6041248)(20161123558025)(20161123564025)(20161123560025)(20161123562025)(20161123555025)(6072148);SRVR:BN6PR12MB1604;BCL:0;PCL:0;RULEID:;SRVR:BN6PR12MB1604; X-Microsoft-Exchange-Diagnostics: 1;BN6PR12MB1604;4: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 X-Forefront-PRVS: 023495660C X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10009020)(4630300001)(6049001)(6009001)(7916002)(39850400002)(39860400002)(39410400002)(39450400003)(39840400002)(2201001)(81166006)(76176999)(305945005)(230700001)(86362001)(7736002)(7366002)(42186005)(92566002)(50466002)(53936002)(54356999)(189998001)(8676002)(50986999)(7406005)(103116003)(7416002)(2906002)(5660300001)(33646002)(9686003)(23676002)(1191002)(66066001)(38730400002)(33716001)(77096006)(83506001)(6486002)(6666003)(25786008)(47776003)(6116002)(90366009)(3846002)(2950100002)(921003)(217873001)(1121003)(2101003)(83996005)(84006005);DIR:OUT;SFP:1101;SCL:1;SRVR:BN6PR12MB1604;H:[127.0.1.1];FPR:;SPF:None;MLV:sfv;LANG:en; X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtCTjZQUjEyTUIxNjA0OzIzOm12ZXJDb1N3dHhYL0JyQW1TL0E2YlFwc3ZT?= =?utf-8?B?SytnUG9JWkhHSE9ibjlGUGVmeG5CQmJ5VHZISmFkZTIzbHZrMXlXa2JhdkEz?= =?utf-8?B?UzhHdmJpeUx3cnVXNlVSeVQvOVEwdnlLRlRjUXhucWlUWis3RW1GOC9IRjc2?= =?utf-8?B?ZlBxS3hGNFR5aURrRnAydHpoWHBTb215ZFlQemNFajk4b3lqcDY1WkE0Z0or?= =?utf-8?B?QUJkNEdJVk1JN09TaXZyMHFXR1JKRjdRMlpOQk93OTFSalR6K1ZIdGZGZDZx?= =?utf-8?B?MHFBNlRBUGEzS1VqSGxRcUM4UWdiL2lWVUt5S3plUWhjREpIZVI5amE2R2hi?= =?utf-8?B?K0dIYWw0RFl2TmYxNm10R2Q3bW10b3ZJL2RnVitLMTdtUGg2Qk1nZEc5VmtB?= =?utf-8?B?eVlWd2ovR2Z5c01HSUtoQmtqdm40eEdQUDJRUFFvZFcxeHBTdTdxbGNrRzFl?= =?utf-8?B?SHdabDRNVjhRUFpjRWs1Wm83UE56S2oxM2RJaTNDMHNKVFUvZ0VDd1RNbnVN?= =?utf-8?B?VmhHYjFoS3Z1WGhjbTV6ZmRJQVJNbzVMcU5RS3R5T2VieHd1MExKTUxHM0c0?= =?utf-8?B?bHc5cW55SUVTbUpSWGgrM1h5UFNZeE1zc1l0Ymc5V2NzSkdja2tTWFB3Zll2?= =?utf-8?B?Q0dtMklUTTJydU9obEtBVmhHSFJ0Wjl5Y3pic3hEZjZOckdYU1VhTHpBcmNh?= =?utf-8?B?WXRTNlVLY3Jrd05VTlI2U1YrZncvNUp3bFoxR013K2plYTlvLzdmb2R6OGIw?= =?utf-8?B?dGc1RERTREl1L1I2REhUdDVNd3QzUWpJbTZ1MG5qSVVSWEhzQktvMm9OQ0FG?= =?utf-8?B?WUhHelJuWGNUQ3JLMjdFUjNKSGduWWpHdEM3QUdjd1luaG8wRW81QTMvRWU3?= =?utf-8?B?T3kvckV3S0Y4WkFSNWhWbTZSUk5sdGlkNHI3M0VhUGZWaE9NUTVuSnM3NitH?= =?utf-8?B?RkUvRXVFSGczMkExM3BhbVVvS3dlWnZwbzNBdGVNbEswNXNPbWQ4NkJ0b0Ir?= =?utf-8?B?WVRjR2k3ZkZQdEpDRzA3cEdWV3QyVmNndE9Ra1llU0VkMDNyczEwS1NwTWVH?= =?utf-8?B?V2xhMkFTdXhCU1V2RS9kVlBnc3VMQitoMWNKM0tLRDI0Snp4Nmx1MEcycDFD?= =?utf-8?B?VThVaXdRV1c3Z2NJK3RQeGtzemJkeEZ2UEwzSVRXRFYrSGNnWmlJTjF5SnpE?= =?utf-8?B?NE9KV0VRQTN3OFVXU1VwdTdGOVR6SExkQVMzSnZkSW1LVjBGNU5VQ0t5T2Mz?= =?utf-8?B?TC9YRUYzWmlXWHpmV1c2OXd1WW5WOEFaSXVYWDhMeG9PZldrbHFYT3F1Qitw?= =?utf-8?B?cWFMWXNKVlh4WE1tbHVKVzRpbWNKZC9vZy9NL0Rpc0VnY0NNR3J6c0JPTHdV?= =?utf-8?B?anVSWTNQMmpwWE1PdE5aVE9VTzBkczhhWXduOFVBU3dWUnZQQ0gwd25NM0Q0?= =?utf-8?B?QkFWd3h1ZVNCMzNxcDdVaDRJdzhiWDRDSWRPWjhxWXFsM05TY0RGOXRaSXN3?= =?utf-8?B?Vy8rY2UzODFtWmhFOFlWdFk4MGtSNEhBeFEwRXVRMkV6dFhYZ2VlNzZoRjZl?= =?utf-8?B?TjU3RGkxMUgxV1J1d2JEVHNWd0ZTeWpjRG0yZzF5a2IxK0tPYjBaQld0ZGg3?= =?utf-8?B?Q0M4KzFkNExRaUdiMmM5bzJTeFhMY2xza0tSNTZEQjYxNlNTSVM1SVlpSlhQ?= =?utf-8?Q?7B1VCLFwzAkPXpx4N3sVRWwU1h//uBB791fYzUB?= X-Microsoft-Exchange-Diagnostics: 1;BN6PR12MB1604;6:PK/M7vVrtja164urGqmWt4KvS6luQ75F4QR7AUWWQ7mxKu2sbIjnIRrKjCPjclU0pIqwttdm3SXxAp1Gpge/3iIZwCtdM7tulugSIwHhjwJkPD7hQfFd4LHhDavlLevrdoxLeytmErawXYfW97NYHmvjMt2k1hxf2nXXKD63jmj2mTlLK3NjGw6adUV4ZPa5t86KXKorFtVa/U++F4mQfK2ayPFqmsbWe1EH5OrJ98tnSuoQ2y7tqCpUcNqwrdtiqkXL2Oe6ZZ25rcuhUGBMprK9C057qmyfsDY5Gg1n6LJd8Gda9tkwN4eIwW5gnmkZAVwlp8CUJS75DVaYAeiYFM/AmJzSocNhMsMAQQhiSTecJsntLGahJR41P1bm7wwRs+1eeGxNoiPQqLLoLCkwM634OS4P3SVDpATXACz6PCw=;5:B1Pww7lTZ6gmcB5+ocwDXe3xO5eZsJ8/jCeZQO+uhMR1dGfBGUCTiPuQovc5bc2kcXZoeVa6g8mwrkHefjqf6kOHMAc/TOb/km8o+pZCSkNpILUtrOJ7Bq992haa+wPLfR4XGQ0Sllre/jH/my35hg==;24:1YhjxeOwokyePnFsKDTpIzynuqC8uKDiaIBikw6oXz3ZxMZhsFLef2OGyMBnXgZPlinmr+bLLNVNpFruhovBTcrOrZMiG3YYzXn8AxIVZCU= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1;BN6PR12MB1604;7:eVypyz/eKb8ShQpPwN+3JvmvY+IpJKyOdsrSdjkeHxPC0dxs1kT7VA7yBVDT669CM6J+PXJKpLwSFEgqaeEzxGjrRold7Hz06J7eLzdfaida0YFuSfjjDZN+XotT5NtqwP7J/FGSdOVrstQLrK5P3TvOI7YQRUBTzIiOhizIWcw3phptJ+/bps9YCbNUiFthmP+IF51eq6ohHb6FxE9W1rUVFNioQWVeGDUWkTnqgta2e24k/21YXmN0leLiY89N5r4UT5vkfGGaZhp+4apUJK+c6EZeUAPF9gH+NqAdxWcaqre8kLpbuAFt3rHK/T1wDYsEFVO1TUabQs4+NsFXEA==;20:prGSBTjeESP3w1vCwQ+Qa9nvVoIPHFy6KSIOdVsemF/gs+Ijzung8RsoczEUqhSZ8KLDuD52T4KLCDCm8Kt3dQ7bN/PA5z/L5fzmVPLoGaGwhBwh1AcFTcg6Af2bptmx8YYptfyiursnOB0OQSeXJjqJdutOblnTcAqw7qgXhMyKRe6fFOmhoVBFuecC3VTaqLDK54QcImwPD4JbZQ8SaVpfAc6gPOVtWNxwhaA3+/LKtDoS9fKUWkxZSJBZRJDr X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2017 15:12:12.7834 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR12MB1604 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Tom Lendacky Update the CPU features to include identifying and reporting on the Secure Encrypted Virtualization (SEV) feature. SME is identified by CPUID 0x8000001f, but requires BIOS support to enable it (set bit 23 of MSR_K8_SYSCFG and set bit 0 of MSR_K7_HWCR). Only show the SEV feature as available if reported by CPUID and enabled by BIOS. Signed-off-by: Tom Lendacky --- arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/msr-index.h | 2 ++ arch/x86/kernel/cpu/amd.c | 22 ++++++++++++++++++---- arch/x86/kernel/cpu/scattered.c | 1 + 4 files changed, 22 insertions(+), 4 deletions(-) diff --git a/arch/x86/include/asm/cpufeatures.h b/arch/x86/include/asm/cpufeatures.h index b1a4468..9907579 100644 --- a/arch/x86/include/asm/cpufeatures.h +++ b/arch/x86/include/asm/cpufeatures.h @@ -188,6 +188,7 @@ */ #define X86_FEATURE_SME ( 7*32+ 0) /* AMD Secure Memory Encryption */ +#define X86_FEATURE_SEV ( 7*32+ 1) /* AMD Secure Encrypted Virtualization */ #define X86_FEATURE_CPB ( 7*32+ 2) /* AMD Core Performance Boost */ #define X86_FEATURE_EPB ( 7*32+ 3) /* IA32_ENERGY_PERF_BIAS support */ #define X86_FEATURE_CAT_L3 ( 7*32+ 4) /* Cache Allocation Technology L3 */ diff --git a/arch/x86/include/asm/msr-index.h b/arch/x86/include/asm/msr-index.h index e2d0503..e8b3b28 100644 --- a/arch/x86/include/asm/msr-index.h +++ b/arch/x86/include/asm/msr-index.h @@ -361,6 +361,8 @@ #define MSR_K7_PERFCTR3 0xc0010007 #define MSR_K7_CLK_CTL 0xc001001b #define MSR_K7_HWCR 0xc0010015 +#define MSR_K7_HWCR_SMMLOCK_BIT 0 +#define MSR_K7_HWCR_SMMLOCK BIT_ULL(MSR_K7_HWCR_SMMLOCK_BIT) #define MSR_K7_FID_VID_CTL 0xc0010041 #define MSR_K7_FID_VID_STATUS 0xc0010042 diff --git a/arch/x86/kernel/cpu/amd.c b/arch/x86/kernel/cpu/amd.c index 6bddda3..675958e 100644 --- a/arch/x86/kernel/cpu/amd.c +++ b/arch/x86/kernel/cpu/amd.c @@ -617,10 +617,13 @@ static void early_init_amd(struct cpuinfo_x86 *c) set_cpu_bug(c, X86_BUG_AMD_E400); /* - * BIOS support is required for SME. If BIOS has enabld SME then - * adjust x86_phys_bits by the SME physical address space reduction - * value. If BIOS has not enabled SME then don't advertise the - * feature (set in scattered.c). + * BIOS support is required for SME and SEV. + * For SME: If BIOS has enabled SME then adjust x86_phys_bits by + * the SME physical address space reduction value. + * If BIOS has not enabled SME then don't advertise the + * SME feature (set in scattered.c). + * For SEV: If BIOS has not enabled SEV then don't advertise the + * SEV feature (set in scattered.c). */ if (c->extended_cpuid_level >= 0x8000001f) { if (cpu_has(c, X86_FEATURE_SME)) { @@ -637,6 +640,17 @@ static void early_init_amd(struct cpuinfo_x86 *c) clear_cpu_cap(c, X86_FEATURE_SME); } } + + if (cpu_has(c, X86_FEATURE_SEV)) { + u64 syscfg, hwcr; + + /* Check if SEV is enabled */ + rdmsrl(MSR_K8_SYSCFG, syscfg); + rdmsrl(MSR_K7_HWCR, hwcr); + if (!(syscfg & MSR_K8_SYSCFG_MEM_ENCRYPT) || + !(hwcr & MSR_K7_HWCR_SMMLOCK)) + clear_cpu_cap(c, X86_FEATURE_SEV); + } } } diff --git a/arch/x86/kernel/cpu/scattered.c b/arch/x86/kernel/cpu/scattered.c index cabda87..c3f58d9 100644 --- a/arch/x86/kernel/cpu/scattered.c +++ b/arch/x86/kernel/cpu/scattered.c @@ -31,6 +31,7 @@ static const struct cpuid_bit cpuid_bits[] = { { X86_FEATURE_CPB, CPUID_EDX, 9, 0x80000007, 0 }, { X86_FEATURE_PROC_FEEDBACK, CPUID_EDX, 11, 0x80000007, 0 }, { X86_FEATURE_SME, CPUID_EAX, 0, 0x8000001f, 0 }, + { X86_FEATURE_SEV, CPUID_EAX, 1, 0x8000001f, 0 }, { 0, 0, 0, 0, 0 } };