lkml.org 
[lkml]   [2023]   [Oct]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: [PATCH v10 48/50] KVM: SEV: Provide support for SNP_GUEST_REQUEST NAE event
> +
> + /*
> + * If a VMM-specific certificate blob hasn't been provided, grab the
> + * host-wide one.
> + */
> + snp_certs = sev_snp_certs_get(sev->snp_certs);
> + if (!snp_certs)
> + snp_certs = sev_snp_global_certs_get();
> +

This is where the generation I suggested adding would get checked. If
the instance certs' generation is not the global generation, then I
think we need a way to return to the VMM to make that right before
continuing to provide outdated certificates.
This might be an unreasonable request, but the fact that the certs and
reported_tcb can be set while a VM is running makes this an issue.

--
-Dionna Glaze, PhD (she/her)

\
 
 \ /
  Last update: 2023-10-17 01:19    [W:1.172 / U:0.216 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site