Hi Stefano,
> On 15 Jul 2021, at 00:48, Stefano Stabellini <sstabell...@kernel.org> wrote: > > Add Dom0less to SUPPORT.md to clarify its support status. The feature is > mature enough and small enough to make it security supported. > > Signed-off-by: Stefano Stabellini <stefano.stabell...@xilinx.com> Reviewed-by: Bertrand Marquis <bertrand.marq...@arm.com> Cheers Bertrand > --- > Changes in v2: > - clarify memory scrubbing > --- > SUPPORT.md | 9 +++++++++ > 1 file changed, 9 insertions(+) > > diff --git a/SUPPORT.md b/SUPPORT.md > index 317392d8f3..524cab9c8d 100644 > --- a/SUPPORT.md > +++ b/SUPPORT.md > @@ -832,6 +832,15 @@ OVMF firmware implements the UEFI boot protocol. > > Status, qemu-xen: Supported > > +## Dom0less > + > +Guest creation from the hypervisor at boot without Dom0 intervention. > + > + Status, ARM: Supported > + > +Memory of dom0less DomUs is not scrubbed at boot (even with > +bootscrub=on); no XSAs will be issues due to unscrubbed memory. > + > # Format and definitions > > This file contains prose, and machine-readable fragments. > -- > 2.17.1 > >
