Re: [PATCH 01/28] hw: mark secure machines for x86, s390, ppc, arm, loonarch, riscv

[Cornelia Huck <cohuck@xxxxxxxxxx>]

On Fri, Sep 11 2026, Daniel P. Berrangé <berrange@xxxxxxxxxx> wrote:

> The versioned machine types are typically present for use in
> virtualization use cases and can be expected to provide a security
> barrier. The only exceptions are the m68k versioned machine types
> which are only used with TCG. There are also a handful of other
> machines declared secure in docs/system/security.rst, notably
> the Xen machine variants and microvm.
>
> Signed-off-by: Daniel P. Berrangé <berrange@xxxxxxxxxx>
> ---
>  hw/arm/virt.c              | 1 +
>  hw/arm/xen-pvh.c           | 1 +
>  hw/i386/microvm.c          | 1 +
>  hw/i386/pc_piix.c          | 4 ++--
>  hw/i386/xen/xen-pvh.c      | 1 +
>  hw/loongarch/virt.c        | 2 ++
>  hw/ppc/spapr.c             | 1 +
>  hw/riscv/virt.c            | 1 +
>  hw/s390x/s390-virtio-ccw.c | 1 +
>  hw/xen/xen-pvh-common.c    | 1 +
>  hw/xenpv/xen_machine_pv.c  | 2 +-
>  include/hw/i386/pc.h       | 1 +
>  12 files changed, 14 insertions(+), 3 deletions(-)

Acked-by: Cornelia Huck <cohuck@xxxxxxxxxx> #s390