These are core infrastructure in virtualization cases so must provide a security boundary.
Signed-off-by: Daniel P. Berrangé <[email protected]> --- hw/i386/kvm/clock.c | 1 + hw/rtc/mc146818rtc.c | 1 + 2 files changed, 2 insertions(+) diff --git a/hw/i386/kvm/clock.c b/hw/i386/kvm/clock.c index e3dad136d3..d3e2301311 100644 --- a/hw/i386/kvm/clock.c +++ b/hw/i386/kvm/clock.c @@ -366,6 +366,7 @@ static const TypeInfo kvmclock_info = { .parent = TYPE_SYS_BUS_DEVICE, .instance_size = sizeof(KVMClockState), .class_init = kvmclock_class_init, + .secure = true, }; /* Note: Must be called after VCPU initialization. */ diff --git a/hw/rtc/mc146818rtc.c b/hw/rtc/mc146818rtc.c index ba396435d1..66f8b177e7 100644 --- a/hw/rtc/mc146818rtc.c +++ b/hw/rtc/mc146818rtc.c @@ -1027,6 +1027,7 @@ static const TypeInfo mc146818rtc_info = { .parent = TYPE_ISA_DEVICE, .instance_size = sizeof(MC146818RtcState), .class_init = rtc_class_initfn, + .secure = true, .interfaces = (const InterfaceInfo[]) { { TYPE_ACPI_DEV_AML_IF }, { }, -- 2.55.0
