diff options
| author | Andrea Parri (Microsoft) <parri.andrea@gmail.com> | 2021-02-01 17:48:12 +0300 |
|---|---|---|
| committer | Wei Liu <wei.liu@kernel.org> | 2021-02-11 11:47:05 +0300 |
| commit | 21a4e356d3588806307555c149b80cec3dedb180 (patch) | |
| tree | c4ad61b4490f41e466122fb109c9fcb5642b24a4 /include/linux/hyperv.h | |
| parent | a6c76bb08dc7f7ff2b1c381002eb6c7211746182 (diff) | |
| download | linux-21a4e356d3588806307555c149b80cec3dedb180.tar.xz | |
Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
Only the VSCs or ICs that have been hardened and that are critical for
the successful adoption of Confidential VMs should be allowed if the
guest is running isolated. This change reduces the footprint of the
code that will be exercised by Confidential VMs and hence the exposure
to bugs and vulnerabilities.
Signed-off-by: Andrea Parri (Microsoft) <parri.andrea@gmail.com>
Reviewed-by: Michael Kelley <mikelley@microsoft.com>
Link: https://lore.kernel.org/r/20210201144814.2701-3-parri.andrea@gmail.com
Signed-off-by: Wei Liu <wei.liu@kernel.org>
Diffstat (limited to 'include/linux/hyperv.h')
| -rw-r--r-- | include/linux/hyperv.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/linux/hyperv.h b/include/linux/hyperv.h index f0d48a368f13..e3426f8c12db 100644 --- a/include/linux/hyperv.h +++ b/include/linux/hyperv.h @@ -789,6 +789,7 @@ struct vmbus_device { u16 dev_type; guid_t guid; bool perf_device; + bool allowed_in_isolated; }; #define VMBUS_DEFAULT_MAX_PKT_SIZE 4096 |