linux-kernel - Re: [PATCH v7 43/45] virt: Add SEV-SNP guest driver

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Thu, 11 Nov 2021 13:27:53 -0600
From:   Brijesh Singh <brijesh.singh@....com>
To:     Randy Dunlap <rdunlap@...radead.org>, x86@...nel.org,
        linux-kernel@...r.kernel.org, kvm@...r.kernel.org,
        linux-efi@...r.kernel.org, platform-driver-x86@...r.kernel.org,
        linux-coco@...ts.linux.dev, linux-mm@...ck.org
Cc:     brijesh.singh@....com, Thomas Gleixner <tglx@...utronix.de>,
        Ingo Molnar <mingo@...hat.com>, Joerg Roedel <jroedel@...e.de>,
        Tom Lendacky <thomas.lendacky@....com>,
        "H. Peter Anvin" <hpa@...or.com>, Ard Biesheuvel <ardb@...nel.org>,
        Paolo Bonzini <pbonzini@...hat.com>,
        Sean Christopherson <seanjc@...gle.com>,
        Vitaly Kuznetsov <vkuznets@...hat.com>,
        Jim Mattson <jmattson@...gle.com>,
        Andy Lutomirski <luto@...nel.org>,
        Dave Hansen <dave.hansen@...ux.intel.com>,
        Sergio Lopez <slp@...hat.com>, Peter Gonda <pgonda@...gle.com>,
        Peter Zijlstra <peterz@...radead.org>,
        Srinivas Pandruvada <srinivas.pandruvada@...ux.intel.com>,
        David Rientjes <rientjes@...gle.com>,
        Dov Murik <dovmurik@...ux.ibm.com>,
        Tobin Feldman-Fitzthum <tobin@....com>,
        Borislav Petkov <bp@...en8.de>,
        Michael Roth <michael.roth@....com>,
        Vlastimil Babka <vbabka@...e.cz>,
        "Kirill A . Shutemov" <kirill@...temov.name>,
        Andi Kleen <ak@...ux.intel.com>,
        "Dr . David Alan Gilbert" <dgilbert@...hat.com>,
        tony.luck@...el.com, marcorr@...gle.com,
        sathyanarayanan.kuppuswamy@...ux.intel.com
Subject: Re: [PATCH v7 43/45] virt: Add SEV-SNP guest driver

Hi Randy,

On 11/10/21 4:27 PM, Randy Dunlap wrote:
> Hi,
> 
> On 11/10/21 2:07 PM, Brijesh Singh wrote:
>> diff --git a/drivers/virt/coco/sevguest/Kconfig 
>> b/drivers/virt/coco/sevguest/Kconfig
>> new file mode 100644
>> index 000000000000..96190919cca8
>> --- /dev/null
>> +++ b/drivers/virt/coco/sevguest/Kconfig
>> @@ -0,0 +1,9 @@
>> +config SEV_GUEST
>> +    tristate "AMD SEV Guest driver"
>> +    default y
> 
> For this to remain as "default y", you need to justify it.
> E.g., if a board cannot boot with an interrupt controller,
> the driver for the interrupt controller can be "default y".
> 
> So why is this default y?
> No other drivers in drivers/virt/ are default y.
> 

I choose the default "y" for two reasons:

1.  The driver is built if the user enables the AMD memory encryption 
support. If the user has selected the AMD memory encryption support, 
they will be querying an attestation report to verify that the guest is 
running on AMD memory encryption enabled hardware.

2. Typically, an attestation report is retrieved from an initial ramdisk 
(before mounting the disk). IIUC, the standard initramfs build tools may 
not include the driver by default and requires the user to go through hoops.

However, I have no strong reason to keep it to "y" if other prefers "m".

thanks