Re: [PATCH RESEND v5 2/2] KVM: X86: Allow userspace to define the microcode version

2018-02-27 Thread Paolo Bonzini
On 28/02/2018 07:03, Wanpeng Li wrote: > From: Wanpeng Li > > Linux (among the others) has checks to make sure that certain features > aren't enabled on a certain family/model/stepping if the microcode version > isn't greater than or equal to a known good version. > >

Re: [PATCH RESEND v5 2/2] KVM: X86: Allow userspace to define the microcode version

2018-02-27 Thread Paolo Bonzini
On 28/02/2018 07:03, Wanpeng Li wrote: > From: Wanpeng Li > > Linux (among the others) has checks to make sure that certain features > aren't enabled on a certain family/model/stepping if the microcode version > isn't greater than or equal to a known good version. > > By exposing the real

[PATCH RESEND v5 2/2] KVM: X86: Allow userspace to define the microcode version

2018-02-27 Thread Wanpeng Li
From: Wanpeng Li Linux (among the others) has checks to make sure that certain features aren't enabled on a certain family/model/stepping if the microcode version isn't greater than or equal to a known good version. By exposing the real microcode version, we're

[PATCH RESEND v5 2/2] KVM: X86: Allow userspace to define the microcode version

2018-02-27 Thread Wanpeng Li
From: Wanpeng Li Linux (among the others) has checks to make sure that certain features aren't enabled on a certain family/model/stepping if the microcode version isn't greater than or equal to a known good version. By exposing the real microcode version, we're preventing buggy guests that