x86/virtio: Have SEV guests enforce restricted virtio memory access
authorTom Lendacky <thomas.lendacky@amd.com>
Thu, 4 Mar 2021 22:40:11 +0000 (16:40 -0600)
committerBorislav Petkov <bp@suse.de>
Mon, 8 Mar 2021 19:41:33 +0000 (20:41 +0100)
commit229164175ff0c61ff581e6bf37fbfcb608b6e9bb
tree5a321c50675c8cf6ba4349f647ba718b0f92a08b
parentf3db3365c069c2a8505cdee8033fe3d22d2fe6c0
x86/virtio: Have SEV guests enforce restricted virtio memory access

An SEV guest requires that virtio devices use the DMA API to allow the
hypervisor to successfully access guest memory as needed.

The VIRTIO_F_VERSION_1 and VIRTIO_F_ACCESS_PLATFORM features tell virtio
to use the DMA API. Add arch_has_restricted_virtio_memory_access() for
x86, to fail the device probe if these features have not been set for the
device when running as an SEV guest.

 [ bp: Fix -Wmissing-prototypes warning
Reported-by: kernel test robot <lkp@intel.com> ]
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Signed-off-by: Borislav Petkov <bp@suse.de>
Link: https://lkml.kernel.org/r/b46e0211f77ca1831f11132f969d470a6ffc9267.1614897610.git.thomas.lendacky@amd.com
arch/x86/Kconfig
arch/x86/mm/mem_encrypt.c