| commit | def986bd61a3545b34dfd3d85e16184a8f4d6108 | [log] [tgz] |
|---|---|---|
| author | Fuad Tabba <tabba@google.com> | Thu Jan 26 11:29:06 2023 +0000 |
| committer | Fuad Tabba <tabba@google.com> | Wed Apr 26 13:58:07 2023 +0100 |
| tree | b0dbb1b324cf3adc6eb0bcbcef8ca267ea352f8d | |
| parent | 3e67da03f6dba5bacfa4af108e7526bb39e57151 [diff] |
KVM: arm64: Ensure that SME controls are disabled in protected mode KVM (and pKVM) do not support SME guests. Therefore KVM ensures that the host's SME state is flushed and that SME controls for enabling access to ZA storage and for streaming are disabled. pKVM needs to protect against a buggy/malicious host. Ensure that it wouldn't run a guest when protected mode is enabled should any of the SME controls be enabled. Signed-off-by: Fuad Tabba <tabba@google.com>