Changes in Makefile

ec51ffcf - virt: coco: Add a coco/Makefile and coco/Kconfig

Sun, 13 Aug 2023 00:21:00 +0000

virt: coco: Add a coco/Makefile and coco/KconfigIn preparation for adding another coco build target, relievedrivers/virt/Makefile of the responsibility to track new compilationunit additions to drivers/virt/coco/, and do the same fordrivers/virt/Kconfig.Reviewed-by: Kuppuswamy Sathyanarayanan Tested-by: Kuppuswamy Sathyanarayanan Reviewed-by: Tom Lendacky Signed-off-by: Dan Williams List of files: /linux-6.15/drivers/virt/Makefile

6c8c1406 - virt: Add TDX guest driver

Wed, 16 Nov 2022 22:38:19 +0000

virt: Add TDX guest driverTDX guest driver exposes IOCTL interfaces to service TDX guestuser-specific requests. Currently, it is only used to allow the user toget the TDREPORT to support TDX attestation.Details about the TDX attestation process are documented inDocumentation/x86/tdx.rst, and the IOCTL details are documented inDocumentation/virt/coco/tdx-guest.rst.Operations like getting TDREPORT involves sending a blob of data asinput and getting another blob of data as output. It was consideredto use a sysfs interface for this, but it doesn't fit well into thestandard sysfs model for configuring values. It would be possible todo read/write on files, but it would need multiple file descriptors,which would be somewhat messy. IOCTLs seem to be the best fittingand simplest model for this use case. The AMD sev-guest driver alsouses the IOCTL interface to support attestation.[Bagas Sanjaya: Ack is for documentation portion]Signed-off-by: Kuppuswamy Sathyanarayanan Signed-off-by: Dave Hansen Reviewed-by: Bagas Sanjaya Reviewed-by: Tony Luck Reviewed-by: Mika Westerberg Acked-by: Kai Huang Acked-by: Kirill A. Shutemov Acked-by: Wander Lairson Costa Link: https://lore.kernel.org/all/20221116223820.819090-3-sathyanarayanan.kuppuswamy%40linux.intel.com List of files: /linux-6.15/drivers/virt/Makefile

d63670d2 - virt: sevguest: Rename the sevguest dir and files to sev-guest

Wed, 20 Apr 2022 14:14:14 +0000

virt: sevguest: Rename the sevguest dir and files to sev-guestRename the drivers/virt/coco/sevguest directory and files to sev-guestso as to match the driver name. [ bp: Rename Documentation/virt/coco/sevguest.rst too, as reported by sfr: https://lore.kernel.org/r/20220427101059.3bf55262@canb.auug.org.au ]Signed-off-by: Tom Lendacky Signed-off-by: Borislav Petkov Link: https://lore.kernel.org/r/2f5c9cb16e3a67599c8e3170f6c72c8712c47d53.1650464054.git.thomas.lendacky@amd.com List of files: /linux-6.15/drivers/virt/Makefile

cbabf03c - virt: Add efi_secret module to expose confidential computing secrets

Tue, 12 Apr 2022 21:21:25 +0000

virt: Add efi_secret module to expose confidential computing secretsThe new efi_secret module exposes the confidential computing (coco)EFI secret area via securityfs interface.When the module is loaded (and securityfs is mounted, typically under/sys/kernel/security), a "secrets/coco" directory is created insecurityfs. In it, a file is created for each secret entry. The nameof each such file is the GUID of the secret entry, and its content isthe secret data.This allows applications running in a confidential computing setting toread secrets provided by the guest owner via a secure secret injectionmechanism (such as AMD SEV's LAUNCH_SECRET command).Removing (unlinking) files in the "secrets/coco" directory will zero outthe secret in memory, and remove the filesystem entry. If the module isremoved and loaded again, that secret will not appear in the filesystem.Signed-off-by: Dov Murik Reviewed-by: Gerd Hoffmann Link: https://lore.kernel.org/r/20220412212127.154182-3-dovmurik@linux.ibm.comSigned-off-by: Ard Biesheuvel List of files: /linux-6.15/drivers/virt/Makefile

fce96cf0 - virt: Add SEV-SNP guest driver

Mon, 07 Mar 2022 21:33:53 +0000

virt: Add SEV-SNP guest driverThe SEV-SNP specification provides the guest a mechanism to communicatewith the PSP without risk from a malicious hypervisor who wishes toread, alter, drop or replay the messages sent. The driver usessnp_issue_guest_request() to issue GHCB SNP_GUEST_REQUEST orSNP_EXT_GUEST_REQUEST NAE events to submit the request to PSP.The PSP requires that all communication should be encrypted using keyspecified through a struct snp_guest_platform_data descriptor.Userspace can use SNP_GET_REPORT ioctl() to query the guest attestationreport.See SEV-SNP spec section Guest Messages for more details. [ bp: Remove the "what" from the commit message, massage. ]Signed-off-by: Brijesh Singh Signed-off-by: Borislav Petkov Link: https://lore.kernel.org/r/20220307213356.2797205-44-brijesh.singh@amd.com List of files: /linux-6.15/drivers/virt/Makefile

af6b54e2 - virt: vmgenid: notify RNG of VM fork and supply generation ID

Wed, 23 Feb 2022 12:46:24 +0000

virt: vmgenid: notify RNG of VM fork and supply generation IDVM Generation ID is a feature from Microsoft, described at, and supported byHyper-V and QEMU. Its usage is described in Microsoft's RNG whitepaper,, as: If the OS is running in a VM, there is a problem that most hypervisors can snapshot the state of the machine and later rewind the VM state to the saved state. This results in the machine running a second time with the exact same RNG state, which leads to serious security problems. To reduce the window of vulnerability, Windows 10 on a Hyper-V VM will detect when the VM state is reset, retrieve a unique (not random) value from the hypervisor, and reseed the root RNG with that unique value. This does not eliminate the vulnerability, but it greatly reduces the time during which the RNG system will produce the same outputs as it did during a previous instantiation of the same VM state.Linux has the same issue, and given that vmgenid is supported already bymultiple hypervisors, we can implement more or less the same solution.So this commit wires up the vmgenid ACPI notification to the RNG's newlyadded add_vmfork_randomness() function.It can be used from qemu via the `-device vmgenid,guid=auto` parameter.After setting that, use `savevm` in the monitor to save the VM state,then quit QEMU, start it again, and use `loadvm`. That will trigger thisdriver's notify function, which hands the new UUID to the RNG. This isdescribed in .And there are hooks for this in libvirt as well, described in.Note, however, that the treatment of this as a UUID is considered to bean accidental QEMU nuance, per,so this driver simply treats these bytes as an opaque 128-bit binaryblob, as per the spec. This doesn't really make a difference anyway,considering that's how it ends up when handed to the RNG in the end.Cc: Alexander Graf Cc: Adrian Catangiu Cc: Daniel P. Berrangé Cc: Dominik Brodowski Cc: Wei Yongjun Tested-by: Souradeep Chakrabarti # With Hyper-V's virtual hardwareReviewed-by: Ard Biesheuvel Reviewed-by: Greg Kroah-Hartman Reviewed-by: Laszlo Ersek Signed-off-by: Jason A. Donenfeld List of files: /linux-6.15/drivers/virt/Makefile

666834c4 - virt: acrn: Introduce ACRN HSM basic driver

Sun, 07 Feb 2021 03:10:27 +0000

virt: acrn: Introduce ACRN HSM basic driverACRN Hypervisor Service Module (HSM) is a kernel module in Service VMwhich communicates with ACRN userspace through ioctls and talks to ACRNHypervisor through hypercalls.Add a basic HSM driver which allows Service VM userspace to communicatewith ACRN. The following patches will add more ioctls, guest VM memorymapping caching, I/O request processing, ioeventfd and irqfd into thismodule. HSM exports a char device interface (/dev/acrn_hsm) to userspace.Cc: Dave Hansen Cc: Zhi Wang Cc: Zhenyu Wang Cc: Yu Wang Cc: Reinette Chatre Cc: Greg Kroah-Hartman Reviewed-by: Reinette Chatre Signed-off-by: Shuo Liu Link: https://lore.kernel.org/r/20210207031040.49576-6-shuo.a.liu@intel.comSigned-off-by: Greg Kroah-Hartman List of files: /linux-6.15/drivers/virt/Makefile

0f5c7b74 - nitro_enclaves: Add Makefile for the Nitro Enclaves driver

Mon, 21 Sep 2020 12:17:29 +0000

nitro_enclaves: Add Makefile for the Nitro Enclaves driverAdd Makefile for the Nitro Enclaves driver, considering the option setin the kernel config.Changelogv9 -> v10* Update commit message to include the changelog before the SoB tag(s).v8 -> v9* Remove -Wall flags, could use W=1 as an option for this.v7 -> v8* No changes.v6 -> v7* No changes.v5 -> v6* No changes.v4 -> v5* No changes.v3 -> v4* No changes.v2 -> v3* Remove the GPL additional wording as SPDX-License-Identifier is already in place.v1 -> v2* Update path to Makefile to match the drivers/virt/nitro_enclaves directory.Reviewed-by: Alexander Graf Signed-off-by: Andra Paraschiv Link: https://lore.kernel.org/r/20200921121732.44291-16-andraprs@amazon.comSigned-off-by: Greg Kroah-Hartman List of files: /linux-6.15/drivers/virt/Makefile

ec8f24b7 - treewide: Add SPDX license identifier - Makefile/Kconfig

Sun, 19 May 2019 12:07:45 +0000

treewide: Add SPDX license identifier - Makefile/KconfigAdd SPDX license identifiers to all Make/Kconfig files which: - Have no license information of any formThese files fall under the project license, GPL v2 only. The resulting SPDXlicense identifier is: GPL-2.0-onlySigned-off-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/drivers/virt/Makefile

0ba002bc - virt: Add vboxguest driver for Virtual Box Guest integration

Thu, 30 Nov 2017 16:01:27 +0000

virt: Add vboxguest driver for Virtual Box Guest integrationThis commit adds a driver for the Virtual Box Guest PCI device used inVirtual Box virtual machines. Enabling this driver will add support forVirtual Box Guest integration features such as copy-and-paste, seamlessmode and OpenGL pass-through.This driver also offers vboxguest IPC functionality which is neededfor the vboxfs driver which offers folder sharing support.Signed-off-by: Hans de Goede Reviewed-by: Larry Finger Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/drivers/virt/Makefile

6db71994 - drivers/virt: introduce Freescale hypervisor management driver

Thu, 09 Jun 2011 20:52:06 +0000

drivers/virt: introduce Freescale hypervisor management driverAdd the drivers/virt directory, which houses drivers that supportvirtualization environments, and add the Freescale hypervisor managementdriver.The Freescale hypervisor management driver provides several services todrivers and applications related to the Freescale hypervisor:1. An ioctl interface for querying and managing partitions2. A file interface to reading incoming doorbells3. An interrupt handler for shutting down the partition upon receiving the shutdown doorbell from a manager partition4. A kernel interface for receiving callbacks when a managed partition shuts down.Signed-off-by: Timur Tabi Acked-by: Arnd Bergmann Signed-off-by: Kumar Gala List of files: /linux-6.15/drivers/virt/Makefile