Tom Lendacky d0ec49d4de kvm/x86/svm: Support Secure Memory Encryption within KVM ... Update the KVM support to work with SME. The VMCB has a number of fields where physical addresses are used and these addresses must contain the memory encryption mask in order to properly access the encrypted memory. Also, use the memory encryption mask when creating and using the nested page tables. Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com> Reviewed-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Borislav Petkov <bp@suse.de> Cc: Alexander Potapenko <glider@google.com> Cc: Andrey Ryabinin <aryabinin@virtuozzo.com> Cc: Andy Lutomirski <luto@kernel.org> Cc: Arnd Bergmann <arnd@arndb.de> Cc: Borislav Petkov <bp@alien8.de> Cc: Brijesh Singh <brijesh.singh@amd.com> Cc: Dave Young <dyoung@redhat.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Jonathan Corbet <corbet@lwn.net> Cc: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Cc: Larry Woodman <lwoodman@redhat.com> Cc: Linus Torvalds <torvalds@linux-foundation.org> Cc: Matt Fleming <matt@codeblueprint.co.uk> Cc: Michael S. Tsirkin <mst@redhat.com> Cc: Paolo Bonzini <pbonzini@redhat.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Radim Krčmář <rkrcmar@redhat.com> Cc: Rik van Riel <riel@redhat.com> Cc: Toshimitsu Kani <toshi.kani@hpe.com> Cc: kasan-dev@googlegroups.com Cc: kvm@vger.kernel.org Cc: linux-arch@vger.kernel.org Cc: linux-doc@vger.kernel.org Cc: linux-efi@vger.kernel.org Cc: linux-mm@kvack.org Link: http://lkml.kernel.org/r/89146eccfa50334409801ff20acd52a90fb5efcf.1500319216.git.thomas.lendacky@amd.com Signed-off-by: Ingo Molnar <mingo@kernel.org>		2017-07-18 11:38:04 +02:00
..
crypto	crypto: glue_helper - remove the le128_gf128mul_x_ble function	2017-04-05 21:58:37 +08:00
e820	x86/boot/e820: Add support to determine the E820 type of an address	2017-07-18 11:38:01 +02:00
fpu	x86/fpu/xstate: Move XSAVES state init to a function	2017-01-25 08:25:12 +01:00
numachip
trace	This release has a few updates:	2016-12-15 13:49:34 -08:00
uv	x86/mm: Pass flush_tlb_info to flush_tlb_others() etc	2017-06-05 09:59:35 +02:00
xen	x86/xen: allow userspace access during hypercalls	2017-07-03 13:26:17 +02:00
a.out-core.h	sched/headers: Prepare to remove the <linux/mm_types.h> dependency from <linux/sched.h>	2017-03-02 08:42:37 +01:00
acenv.h
acpi.h	x86/mm: Stop calling leave_mm() in idle code	2017-07-05 10:52:57 +02:00
agp.h
alternative-asm.h
alternative.h	x86/alternatives: Add stack frame dependency to alternative_call_2()	2016-09-24 09:30:03 +02:00
amd_nb.h	x86/mce: Convert threshold_bank.cpus from atomic_t to refcount_t	2017-05-21 21:55:13 +02:00
apb_timer.h
apic.h	x86/apic: Add irq_data argument to apic->cpu_mask_to_apicid()	2017-06-22 18:21:22 +02:00
apic_flat_64.h
apicdef.h
apm.h
arch_hweight.h
archrandom.h
asm-offsets.h
asm-prototypes.h	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
asm.h	x86/mm/kaslr: Use the _ASM_MUL macro for multiplication to work around Clang incompatibility	2017-05-05 08:31:05 +02:00
atomic.h	locking/x86: Remove the unused atomic_inc_short() methd	2017-06-08 10:33:50 +02:00
atomic64_32.h
atomic64_64.h	locking/atomic/x86: Use atomic_try_cmpxchg()	2017-03-23 08:54:41 +01:00
barrier.h
bios_ebda.h
bitops.h	mm: optimize PageWaiters bit use for unlock_page()	2016-12-29 11:03:15 -08:00
boot.h
bootparam_utils.h
bug.h	debug: Add _ONCE() logic to report_bug()	2017-03-30 09:37:20 +02:00
bugs.h
cache.h
cacheflush.h	treewide: decouple cacheflush.h and set_memory.h	2017-05-08 17:15:14 -07:00
calgary.h
ce4100.h
checksum.h
checksum_32.h
checksum_64.h	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
clocksource.h	x86/vdso: Add VCLOCK_HVCLOCK vDSO clock read method	2017-03-11 14:47:28 +01:00
cmdline.h
cmpxchg.h	locking/atomic: Fix atomic_try_cmpxchg() semantics	2017-03-30 09:35:54 +02:00
cmpxchg_32.h
cmpxchg_64.h
compat.h	take compat_sys_old_getrlimit() to native syscall	2017-05-27 15:38:06 -04:00
cpu.h
cpu_device_id.h
cpufeature.h	x86/cpufeature: Provide helper to set bugs bits	2016-12-09 21:23:20 +01:00
cpufeatures.h	x86/cpu/AMD: Add the Secure Memory Encryption CPU feature	2017-07-18 11:37:59 +02:00
cpumask.h
crash.h
current.h
debugreg.h
delay.h
desc.h	x86/xen/gdt: Use X86_FEATURE_XENPV instead of globals for the GDT fixup	2017-03-23 08:25:08 +01:00
desc_defs.h	scripts/spelling.txt: add "an union" pattern and fix typo instances	2017-02-27 18:43:46 -08:00
device.h	treewide: Move dma_ops from struct dev_archdata into struct device	2017-01-24 12:23:35 -05:00
disabled-features.h	x86/mm: Disable PCID on 32-bit kernels	2017-07-05 10:52:57 +02:00
div64.h	math64, timers: Fix 32bit mul_u64_u32_shr() and friends	2017-01-14 11:31:50 +01:00
dma-mapping.h	x86, swiotlb: Add memory encryption support	2017-07-18 11:38:03 +02:00
dma.h
dmi.h	x86, mpparse, x86/acpi, x86/PCI, x86/dmi, SFI: Use memremap() for RAM mappings	2017-07-18 11:37:58 +02:00
dwarf2.h
edac.h
efi.h	x86/efi: move asmlinkage before return type	2017-07-12 16:26:04 -07:00
elf.h	binfmt_elf: use ELF_ET_DYN_BASE only for PIE	2017-07-10 16:32:36 -07:00
emergency-restart.h
entry_arch.h
espfix.h
exec.h
export.h
extable.h	x86/debug: Handle early WARN_ONs proper	2017-06-12 21:17:48 +02:00
fb.h
fixmap.h	x86/mm: Extend early_memremap() support with additional attrs	2017-07-18 11:38:00 +02:00
floppy.h	x86/floppy: Use designated initializers	2016-12-18 09:25:38 +01:00
frame.h
ftrace.h
futex.h
gart.h	x86/boot/e820: Prefix the E820_* type names with "E820_TYPE_"	2017-01-28 22:55:22 +01:00
genapic.h
geode.h
hardirq.h	x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code	2017-06-05 09:59:44 +02:00
highmem.h
hpet.h
hugetlb.h	mm/hugetlb: clean up ARCH_HAS_GIGANTIC_PAGE	2017-07-06 16:24:33 -07:00
hw_breakpoint.h
hw_irq.h
hypertransport.h
hypervisor.h	x86/cpu: remove hypervisor specific set_cpu_features	2017-05-02 11:14:30 +02:00
i8259.h
ia32.h
ia32_unistd.h
imr.h
inat.h
inat_types.h
init.h	x86/mm: Add support for gbpages to kernel_ident_mapping_init()	2017-05-08 08:28:40 +02:00
insn.h
inst.h
intel-family.h	x86/cpu: Keep model defines sorted by model number	2017-04-14 21:22:38 +02:00
intel-mid.h	x86/platform/intel-mid: Make intel_scu_device_register() static	2017-01-09 23:13:36 +01:00
intel_mid_vrtc.h
intel_pmc_ipc.h	platform/x86: intel_pmc_ipc: use gcr mem base for S0ix counter read	2017-04-28 21:51:28 +03:00
intel_pt.h
intel_punit_ipc.h
intel_rdt.h	x86/intel_rdt: Get rid of anon union	2017-04-17 10:16:23 +02:00
intel_rdt_common.h	x86/cqm: Share PQR_ASSOC related data between CQM and CAT	2016-10-26 23:12:39 +02:00
intel_scu_ipc.h	platform/x86: intel_scu_ipc: Introduce intel_scu_ipc_raw_command()	2017-04-13 10:16:04 -07:00
intel_telemetry.h
io.h	x86/mm: Add support to access boot related data in the clear	2017-07-18 11:38:02 +02:00
io_apic.h
iomap.h
iommu.h	x86: remove arch specific dma_supported implementation	2017-06-28 06:54:46 -07:00
iommu_table.h
iosf_mbi.h	x86/platform/intel/iosf_mbi: Add a PMIC bus access notifier	2017-03-02 15:46:25 +01:00
ipi.h
irq.h	genirq/cpuhotplug: Add support for cleaning up move in progress	2017-06-22 18:21:17 +02:00
irq_regs.h
irq_remapping.h	x86/msi: Remove unused remap irq domain interface	2017-06-22 18:21:11 +02:00
irq_vectors.h
irq_work.h
irqdomain.h
irqflags.h	nmi_backtrace: generate one-line reports for idle cpus	2016-10-07 18:46:30 -07:00
ist.h
jump_label.h
kasan.h	x86/mm: Define virtual memory map for 5-level paging	2017-04-04 08:22:33 +02:00
kaslr.h
kbdleds.h
Kbuild	sched/cputime: Remove generic asm headers	2017-02-01 09:14:07 +01:00
kdebug.h	x86/dumpstack: Remove kernel text addresses from stack dump	2016-10-25 18:40:37 +02:00
kexec-bzimage64.h
kexec.h	x86/kexec: Add 5-level paging support	2017-03-27 08:56:13 +02:00
kgdb.h
kmap_types.h
kmemcheck.h
kprobes.h	kprobes/x86: Make boostable flag boolean	2017-04-12 09:23:46 +02:00
kvm_emulate.h	KVM: async_pf: Force a nested vmexit if the injected #PF is async_pf	2017-07-14 14:26:16 +02:00
kvm_guest.h
kvm_host.h	kvm/x86/svm: Support Secure Memory Encryption within KVM	2017-07-18 11:38:04 +02:00
kvm_page_track.h	KVM: x86: cleanup the page tracking SRCU instance	2017-03-28 14:08:02 +02:00
kvm_para.h
kvmclock.h	kvmclock: export kvmclock clocksource and data pointers	2017-02-08 17:16:19 +01:00
lguest.h
lguest_hcall.h	x86/fpu, lguest: Remove CR0.TS support	2016-11-01 07:47:54 +01:00
linkage.h
livepatch.h
local.h
local64.h
mach_timer.h
mach_traps.h
math_emu.h
mc146818rtc.h
mce.h	x86/mce: Get rid of register_mce_write_callback()	2017-06-14 07:32:07 +02:00
mem_encrypt.h	x86, swiotlb: Add memory encryption support	2017-07-18 11:38:03 +02:00
microcode.h	Merge branch 'x86/urgent' into x86/microcode, to resolve conflicts	2017-01-31 08:38:17 +01:00
microcode_amd.h	x86/microcode/AMD: Check patch level only on the BSP	2017-01-23 10:02:50 +01:00
microcode_intel.h	x86/microcode/intel: Add a helper which gives the microcode revision	2017-01-09 23:11:14 +01:00
misc.h
mmconfig.h
mmu.h	x86/mm: Give each mm TLB flush generation a unique ID	2017-07-05 10:52:56 +02:00
mmu_context.h	x86/mm: Rework lazy TLB mode and TLB freshness tracking	2017-07-05 10:52:57 +02:00
mmx.h
mmzone.h
mmzone_32.h
mmzone_64.h
module.h
mpspec.h	x86/boot/e820: Rename early_reserve_e820() to e820__memblock_alloc() and document it	2017-01-28 14:42:30 +01:00
mpspec_def.h
mpx.h	sched/headers: Prepare to remove the <linux/mm_types.h> dependency from <linux/sched.h>	2017-03-02 08:42:37 +01:00
mshyperv.h	Char/Misc patches for 4.13-rc1	2017-07-03 20:55:59 -07:00
msi.h
msidef.h
msr-index.h	x86/cpu/AMD: Add the Secure Memory Encryption CPU feature	2017-07-18 11:37:59 +02:00
msr-trace.h
msr.h	x86/MSR: Carve out bare minimum accessors	2017-01-23 10:02:45 +01:00
mtrr.h
mwait.h	sched/headers: Prepare for new header dependencies before moving code to <linux/sched/idle.h>	2017-03-02 08:42:26 +01:00
nmi.h
nops.h
numa.h
numa_32.h
olpc.h
olpc_ofw.h
page.h
page_32.h
page_32_types.h
page_64.h	x86/asm: Optimize clear_page()	2017-03-07 08:28:00 +01:00
page_64_types.h	x86/mm: Define virtual memory map for 5-level paging	2017-04-04 08:22:33 +02:00
page_types.h	x86/mm: Provide general kernel support for memory encryption	2017-07-18 11:38:00 +02:00
paravirt.h	Merge branch 'x86-mm-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2017-07-03 14:45:09 -07:00
paravirt_types.h	x86/mm: Pass flush_tlb_info to flush_tlb_others() etc	2017-06-05 09:59:35 +02:00
parport.h
pat.h	x86/mm/pat: Don't report PAT on CPUs that don't support it	2017-07-05 09:01:24 +02:00
pci-direct.h
pci-functions.h
pci.h	x86/PCI: Remove duplicate defines	2017-06-28 22:32:55 +02:00
pci_64.h
pci_x86.h	x86/boot/e820: Remove spurious asm/e820/api.h inclusions	2017-01-28 09:31:14 +01:00
percpu.h	x86: Remove x86_test_and_clear_bit_percpu()	2016-11-18 12:07:57 +01:00
perf_event.h
perf_event_p4.h
pgalloc.h	x86/paravirt: Add 5-level support to the paravirt code	2017-04-04 08:22:34 +02:00
pgtable-2level.h	mm, x86: add support for PUD-sized transparent hugepages	2017-02-24 17:46:54 -08:00
pgtable-2level_types.h	x86/mm: Extend headers with basic definitions to support 5-level paging	2017-03-14 08:45:07 +01:00
pgtable-3level.h	x86/mm/gup: Switch GUP to the generic get_user_page_fast() implementation	2017-06-13 08:56:50 +02:00
pgtable-3level_types.h	x86/mm: Extend headers with basic definitions to support 5-level paging	2017-03-14 08:45:07 +01:00
pgtable.h	x86/mm: Insure that boot memory areas are mapped properly	2017-07-18 11:38:01 +02:00
pgtable_32.h	x86/headers: Simplify asm/fixmap.h inclusion into asm/pgtable*.h	2017-03-21 08:21:17 +01:00
pgtable_32_types.h
pgtable_64.h	x86/boot/64: Add support of additional page table level during early boot	2017-06-13 08:56:55 +02:00
pgtable_64_types.h	x86/espfix: Add support for 5-level paging	2017-04-04 08:22:34 +02:00
pgtable_types.h	x86/mm: Extend early_memremap() support with additional attrs	2017-07-18 11:38:00 +02:00
pkeys.h	x86/pkeys: Check against max pkey to avoid overflows	2017-03-01 10:51:50 +01:00
platform_sst_audio.h
pm-trace.h
pmc_core.h
posix_types.h
preempt.h	sched/x86: Do not clear PREEMPT_NEED_RESCHED on preempt count reset	2016-11-16 10:29:04 +01:00
probe_roms.h
processor-cyrix.h
processor-flags.h	x86/mm: Add SME support for read_cr3_pa()	2017-07-18 11:38:00 +02:00
processor.h	x86/mm: Add SME support for read_cr3_pa()	2017-07-18 11:38:00 +02:00
prom.h
proto.h	x86/arch_prctl: Add do_arch_prctl_common()	2017-03-20 16:10:33 +01:00
ptrace.h
purgatory.h	kexec, x86/purgatory: Unbreak it and clean it up	2017-03-10 20:55:09 +01:00
pvclock-abi.h
pvclock.h	clocksource: Use a plain u64 instead of cycle_t	2016-12-25 11:04:12 +01:00
qrwlock.h
qspinlock.h	x86/paravirt: Change vcp_is_preempted() arg type to long	2017-02-21 12:48:06 +01:00
qspinlock_paravirt.h
realmode.h	x86/boot/realmode: Check for memory encryption on the APs	2017-07-18 11:38:04 +02:00
reboot.h	x86/mce: Handle broadcasted MCE gracefully with kexec	2017-03-13 20:18:07 +01:00
reboot_fixups.h
required-features.h	x86/boot: Detect 5-level paging support	2017-04-04 08:22:33 +02:00
rio.h
rmwcc.h
rwsem.h	locking/rwsem/x86: Add stack frame dependency for ____down_write()	2016-10-18 12:21:16 +02:00
seccomp.h
sections.h	x86: separate extable.h, switch sections.h to it	2016-09-27 21:15:23 -04:00
segment.h
serial.h
set_memory.h	x86/mm: Add support for changing the memory encryption attribute	2017-07-18 11:38:02 +02:00
setup.h	x86/time: Make setup_default_timer_irq() static	2017-06-13 08:42:09 +02:00
setup_arch.h
shmparam.h
sigcontext.h
sigframe.h
sighandling.h
signal.h
simd.h
smap.h
smp.h	x86/smp: Remove the redundant #ifdef CONFIG_SMP directive	2017-04-14 22:43:00 +02:00
sparsemem.h	x86/mm: Define virtual memory map for 5-level paging	2017-04-04 08:22:33 +02:00
special_insns.h	x86/mm: Split read_cr3() into read_cr3_pa() and __read_cr3()	2017-06-13 08:48:09 +02:00
spinlock.h	locking/spinlocks/x86, paravirt: Remove paravirt_ticketlocks_enabled	2017-01-14 09:33:46 +01:00
spinlock_types.h	x86, locking/spinlocks: Remove ticket (spin)lock implementation	2016-09-30 10:56:00 +02:00
sta2x11.h
stackprotector.h	x86: ascii armor the x86_64 boot init stack canary	2017-07-12 16:26:03 -07:00
stacktrace.h	x86/unwind: Include __schedule() in stack traces	2017-01-12 09:28:28 +01:00
string.h
string_32.h	include/linux/string.h: add the option of fortified string.h functions	2017-07-12 16:26:03 -07:00
string_64.h	include/linux/string.h: add the option of fortified string.h functions	2017-07-12 16:26:03 -07:00
suspend.h
suspend_32.h
suspend_64.h	x86/power/64: Use char arrays for asm function names	2017-06-22 03:10:12 +02:00
svm.h	KVM: SVM: Enable Virtual VMLOAD VMSAVE feature	2017-07-12 22:38:30 +02:00
swiotlb.h
switch_to.h	x86/unwind: Include __schedule() in stack traces	2017-01-12 09:28:28 +01:00
sync_bitops.h
sys_ia32.h
syscall.h
syscalls.h
sysfb.h
tce.h
text-patching.h
thread_info.h	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching	2017-05-02 18:24:16 -07:00
time.h
timer.h	x86/tsc: Remodel cyc2ns to use seqcount_latch()	2017-05-15 10:15:15 +02:00
timex.h
tlb.h
tlbbatch.h	x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code	2017-06-05 09:59:44 +02:00
tlbflush.h	x86/mm: Enable CR4.PCIDE on supported systems	2017-07-05 10:52:58 +02:00
topology.h	sched/x86: Change CONFIG_SCHED_ITMT to CONFIG_SCHED_MC_PRIO	2016-11-30 08:27:08 +01:00
trace_clock.h
traps.h
tsc.h	clocksource: Use a plain u64 instead of cycle_t	2016-12-25 11:04:12 +01:00
uaccess.h	Merge branch 'work.uaccess-unaligned' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2017-07-15 11:17:52 -07:00
uaccess_32.h	x86: switch to RAW_COPY_USER	2017-03-29 12:06:28 -04:00
uaccess_64.h	x86, uaccess: introduce copy_from_iter_flushcache for pmem / cache-bypass operations	2017-06-09 09:09:56 -07:00
unaligned.h
unistd.h	Remove compat_sys_getdents64()	2017-04-17 12:52:22 -04:00
unwind.h	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching	2017-05-02 18:24:16 -07:00
uprobes.h
user.h
user32.h
user_32.h
user_64.h
vdso.h	x86/vdso: Add VCLOCK_HVCLOCK vDSO clock read method	2017-03-11 14:47:28 +01:00
vga.h	x86, drm, fbdev: Do not specify encrypted memory for video mappings	2017-07-18 11:38:04 +02:00
vgtod.h	clocksource: Use a plain u64 instead of cycle_t	2016-12-25 11:04:12 +01:00
virtext.h
vm86.h
vmx.h	KVM: nVMX: support RDRAND and RDSEED exiting	2017-04-07 16:49:00 +02:00
vsyscall.h
vvar.h
word-at-a-time.h
x2apic.h
x86_init.h	x86/init: Fix a couple of comment typos	2016-12-19 11:34:16 +01:00
xor.h
xor_32.h
xor_64.h
xor_avx.h