[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH v7 0/2] Enable notify VM exit
From: |
Chenyi Qiang |
Subject: |
[PATCH v7 0/2] Enable notify VM exit |
Date: |
Fri, 23 Sep 2022 15:33:31 +0800 |
Notify VM exit is introduced to mitigate the potential DOS attach from
malicious VM. This series is the userspace part to enable this feature
through a new KVM capability KVM_CAP_X86_NOTIFY_VMEXIT. The detailed
info can be seen in Patch 2.
The corresponding KVM support can be found in linux 6.0-rc:
(2f4073e08f4c KVM: VMX: Enable Notify VM exit)
This patch set depends on some definition which can be updated from
scripts/update-linux-headers.sh. The corresponding separate patch set is
available at:
https://lists.gnu.org/archive/html/qemu-devel/2022-09/msg02102.html
---
Change logs:
v6 -> v7
- Add a warning message when exiting to userspace (Peter Xu)
- v6: 20220915092839.5518-1-chenyi.qiang@intel.com/">https://lore.kernel.org/all/20220915092839.5518-1-chenyi.qiang@intel.com/
v5 -> v6
- Add some info related to the valid range of notify_window in patch 2. (Peter
Xu)
- Add the doc in qemu-options.hx. (Peter Xu)
- v5:
https://lore.kernel.org/qemu-devel/20220817020845.21855-1-chenyi.qiang@intel.com/
v4 -> v5
- Remove the assert check to avoid the nop in NDEBUG case. (Yuan)
- v4:
https://lore.kernel.org/qemu-devel/20220524140302.23272-1-chenyi.qiang@intel.com/
v3 -> v4
- Add a new KVM cap KVM_CAP_TRIPLE_FAULT_EVENT to guard the extension of triple
fault
event save&restore.
- v3:
https://lore.kernel.org/qemu-devel/20220421074028.18196-1-chenyi.qiang@intel.com/
---
Chenyi Qiang (2):
i386: kvm: extend kvm_{get, put}_vcpu_events to support pending triple
fault
i386: Add notify VM exit support
hw/i386/x86.c | 45 ++++++++++++++++++++++++++++++++++++
include/hw/i386/x86.h | 5 ++++
qemu-options.hx | 10 +++++++-
target/i386/cpu.c | 1 +
target/i386/cpu.h | 1 +
target/i386/kvm/kvm.c | 54 +++++++++++++++++++++++++++++++++++++++++++
6 files changed, 115 insertions(+), 1 deletion(-)
--
2.17.1
- [PATCH v7 0/2] Enable notify VM exit,
Chenyi Qiang <=