[Xen-devel] [RFC 0/3] x86: Add a hvmop for setting the #VE suppress bit

[Adrian Pop <apop@xxxxxxxxxxxxxxx>]

After DomU has enabled #VE using HVMOP_altp2m_vcpu_enable_notify, all
its pages have the #VE suppress bit cleared, generating #VEs for any EPT
violation.  There is currently no way to change the value of the #VE
suppress bit for a page from a domain; it can only be done in Xen
internally using ept_set_entry().

Following the discussion from
https://lists.xen.org/archives/html/xen-devel/2017-03/msg01312.html this
patch introduces a new hvmop to set this bit.

I'm not quite sure where it would be best to define
p2m_set_suppress_ve().  It is currently in mem_access.c, but this file
contains common functions for x86 (vmx & svm), while this function is
Intel-specific.

Adrian Pop (2):
  x86/altp2m: Add a hvmop for setting the suppress #VE bit
  libxc: Add support for the altp2m suppress #VE hvmop

Vlad Ioan Topan (1):
  x86/mm: Change default value for suppress #VE in set_mem_access()

 tools/libxc/include/xenctrl.h   |  2 ++
 tools/libxc/xc_altp2m.c         | 24 +++++++++++++++++++
 xen/arch/x86/hvm/hvm.c          | 14 +++++++++++
 xen/arch/x86/mm/mem_access.c    | 51 +++++++++++++++++++++++++++++++++++++++--
 xen/include/public/hvm/hvm_op.h | 15 ++++++++++++
 xen/include/xen/mem_access.h    |  3 +++
 6 files changed, 107 insertions(+), 2 deletions(-)

-- 
2.12.1


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel