lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 1 Nov 2017 16:17:15 -0500 From: Brijesh Singh <brijesh.singh@....com> To: kvm@...r.kernel.org, linux-kernel@...r.kernel.org Cc: bp@...en8.de, Brijesh Singh <brijesh.singh@....com>, Thomas Gleixner <tglx@...utronix.de>, Ingo Molnar <mingo@...hat.com>, "H. Peter Anvin" <hpa@...or.com>, Paolo Bonzini <pbonzini@...hat.com>, Radim Krčmář <rkrcmar@...hat.com>, Joerg Roedel <joro@...tes.org>, Borislav Petkov <bp@...e.de>, Tom Lendacky <thomas.lendacky@....com>, x86@...nel.org Subject: [Part2 PATCH v7 30/38] KVM: SVM: Add support for SEV LAUNCH_FINISH command The command is used for finializing the SEV guest launch process. Cc: Thomas Gleixner <tglx@...utronix.de> Cc: Ingo Molnar <mingo@...hat.com> Cc: "H. Peter Anvin" <hpa@...or.com> Cc: Paolo Bonzini <pbonzini@...hat.com> Cc: "Radim Krčmář" <rkrcmar@...hat.com> Cc: Joerg Roedel <joro@...tes.org> Cc: Borislav Petkov <bp@...e.de> Cc: Tom Lendacky <thomas.lendacky@....com> Cc: x86@...nel.org Cc: kvm@...r.kernel.org Cc: linux-kernel@...r.kernel.org Signed-off-by: Brijesh Singh <brijesh.singh@....com> Reviewed-by: Borislav Petkov <bp@...e.de> --- arch/x86/kvm/svm.c | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/arch/x86/kvm/svm.c b/arch/x86/kvm/svm.c index c9be9dde7b85..0ed823806bbc 100644 --- a/arch/x86/kvm/svm.c +++ b/arch/x86/kvm/svm.c @@ -5982,6 +5982,26 @@ static int sev_launch_measure(struct kvm *kvm, struct kvm_sev_cmd *argp) return ret; } +static int sev_launch_finish(struct kvm *kvm, struct kvm_sev_cmd *argp) +{ + struct kvm_sev_info *sev = &kvm->arch.sev_info; + struct sev_data_launch_finish *data; + int ret; + + if (!sev_guest(kvm)) + return -ENOTTY; + + data = kzalloc(sizeof(*data), GFP_KERNEL); + if (!data) + return -ENOMEM; + + data->handle = sev->handle; + ret = sev_issue_cmd(kvm, SEV_CMD_LAUNCH_FINISH, data, &argp->error); + + kfree(data); + return ret; +} + static int svm_mem_enc_op(struct kvm *kvm, void __user *argp) { struct kvm_sev_cmd sev_cmd; @@ -6008,6 +6028,9 @@ static int svm_mem_enc_op(struct kvm *kvm, void __user *argp) case KVM_SEV_LAUNCH_MEASURE: r = sev_launch_measure(kvm, &sev_cmd); break; + case KVM_SEV_LAUNCH_FINISH: + r = sev_launch_finish(kvm, &sev_cmd); + break; default: r = -EINVAL; goto out; -- 2.9.5
Powered by blists - more mailing lists