diff options
| author | Yang, Wei Y <wei.y.yang@intel.com> | 2011-05-30 23:17:42 +0800 |
|---|---|---|
| committer | Anthony Liguori <aliguori@us.ibm.com> | 2011-06-14 09:34:35 -0500 |
| commit | f79116867ec80ed5d1d10043a3fd9ac8afd182c1 (patch) | |
| tree | 0c7a096bd52bbdc98e06c691973fba45414bc22e /pc-bios | |
| parent | b3baa152aaef1905876670590275c2dd0bbb088c (diff) | |
kvm: Enable CPU SMEP feature
This patchset enables a new CPU feature SMEP (Supervisor Mode Execution
Protection) in QEMU-KVM. SMEP prevents kernel from executing code in application.
Updated Intel SDM describes this CPU feature. The document will be published soon.
SMEP is identified by CPUID leaf 7 EBX[7], which is 0 before. Get the right value by query KVM kernel module, so that guest can get SMEP through CPUID.
Signed-off-by: Yang, Wei <wei.y.yang@intel.com>
Singed-off-by: Shan, Haitao <haitao.shan@intel.com>
Singed-off-by: Li, Xin <xin.li@intel.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
Diffstat (limited to 'pc-bios')
0 files changed, 0 insertions, 0 deletions