From: Oliver Upton <oupton@google.com>
To: kvm@vger.kernel.org
Cc: Paolo Bonzini <pbonzini@redhat.com>,
Sean Christopherson <sean.j.christopherson@intel.com>,
Oliver Upton <oupton@google.com>
Subject: [PATCH 0/4] Restrict PV features to only enabled guests
Date: Wed, 5 Aug 2020 21:16:03 +0000 [thread overview]
Message-ID: <20200805211607.2048862-1-oupton@google.com> (raw)
To date, KVM has allowed guests to use paravirtual interfaces regardless
of the configured CPUID. While almost any guest will consult the
KVM_CPUID_FEATURES leaf _before_ using PV features, it is still
undesirable to have such interfaces silently present.
This series aims to address the issue by adding explicit checks against
the guest's CPUID when servicing any paravirtual feature. Since this
effectively changes the guest/hypervisor ABI, a KVM_CAP is warranted to
guard the new behavior.
Patches 1-2 refactor some of the PV code in anticipation of the change.
Patch 3 introduces the checks + KVM_CAP. Finally, patch 4 fixes some doc
typos that were noticed when working on this series.
Parent commit: f3633c268354 ("Merge tag 'kvm-s390-next-5.9-1' of git://git.kernel.org/pub/scm/linux/kernel/git/kvms390/linux into kvm-next-5.6")
Oliver Upton (4):
kvm: x86: encapsulate wrmsr(MSR_KVM_SYSTEM_TIME) emulation in helper
fn
kvm: x86: set wall_clock in kvm_write_wall_clock()
kvm: x86: only provide PV features if enabled in guest's CPUID
Documentation: kvm: fix some typos in cpuid.rst
Documentation/virt/kvm/api.rst | 11 +++
Documentation/virt/kvm/cpuid.rst | 88 +++++++++++-----------
arch/x86/include/asm/kvm_host.h | 6 ++
arch/x86/kvm/cpuid.h | 16 ++++
arch/x86/kvm/x86.c | 122 +++++++++++++++++++++++--------
include/uapi/linux/kvm.h | 1 +
6 files changed, 171 insertions(+), 73 deletions(-)
--
2.28.0.236.gb10cc79966-goog
next reply other threads:[~2020-08-05 21:16 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-08-05 21:16 Oliver Upton [this message]
2020-08-05 21:16 ` [PATCH 1/4] kvm: x86: encapsulate wrmsr(MSR_KVM_SYSTEM_TIME) emulation in helper fn Oliver Upton
2020-08-05 21:16 ` [PATCH 2/4] kvm: x86: set wall_clock in kvm_write_wall_clock() Oliver Upton
2020-08-05 21:16 ` [PATCH 3/4] kvm: x86: only provide PV features if enabled in guest's CPUID Oliver Upton
2020-08-05 21:16 ` [PATCH 4/4] Documentation: kvm: fix some typos in cpuid.rst Oliver Upton
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200805211607.2048862-1-oupton@google.com \
--to=oupton@google.com \
--cc=kvm@vger.kernel.org \
--cc=pbonzini@redhat.com \
--cc=sean.j.christopherson@intel.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.