Re: [PATCH v2] Enable CPU SMEP feature for KVM

2011-05-24 Thread Avi Kivity
On 05/24/2011 05:53 AM, Haitao Shan wrote: I don't understand why. Can you elaborate? Shadow implements the U bit, which is all that is needed by SMEP as far as I can tell. Basically, all SMEP-capable platform has EPT, which is on by default in KVM. Thus, we naturally thought th

Re: [PATCH v2] Enable CPU SMEP feature for KVM

2011-05-22 Thread Avi Kivity
On 05/22/2011 11:08 AM, Yang, Wei Y wrote: > This patch matches with "[PATCH v2] Enable CPU SMEP feature support for QEMU-KVM", no changes since v1. > > Enable newly documented SMEP (Supervisor Mode Execution Protection) CPU feature in KVM module. > > Intel new CPU supports SMEP (Supervisor

RE: [PATCH v2] Enable CPU SMEP feature for KVM

2011-05-22 Thread Yang, Wei Y
> This patch matches with "[PATCH v2] Enable CPU SMEP feature support for > QEMU-KVM", no changes since v1. > > Enable newly documented SMEP (Supervisor Mode Execution Protection) CPU > feature in KVM module. > > Intel new CPU supports SMEP (Supervisor Mode Execution Protection). SMEP > prevents

Re: [PATCH v2] Enable CPU SMEP feature for KVM

2011-05-21 Thread Avi Kivity
On 05/22/2011 08:23 AM, Yang, Wei Y wrote: This patch matches with "[PATCH v2] Enable CPU SMEP feature support for QEMU-KVM", no changes since v1. Enable newly documented SMEP (Supervisor Mode Execution Protection) CPU feature in KVM module. Intel new CPU supports SMEP (Supervisor Mode Execut

[PATCH v2] Enable CPU SMEP feature for KVM

2011-05-21 Thread Yang, Wei Y
This patch matches with "[PATCH v2] Enable CPU SMEP feature support for QEMU-KVM", no changes since v1. Enable newly documented SMEP (Supervisor Mode Execution Protection) CPU feature in KVM module. Intel new CPU supports SMEP (Supervisor Mode Execution Protection). SMEP prevents kernel from e