[PATCH v3 28/70] i386/tdx: Make sept_ve_disable set by default

Xiaoyao Li
2023-11-15T07:18:43Z

From: Isaku Yamahata <isaku.yamahata@intel.com>

For TDX KVM use case, Linux guest is the most major one. It requires
sept_ve_disable set. Make it default for the main use case. For other use
case, it can be enabled/disabled via qemu command line.

Signed-off-by: Isaku Yamahata <isaku.yamahata@intel.com>
---
target/i386/kvm/tdx.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/target/i386/kvm/tdx.c b/target/i386/kvm/tdx.c
index 6b9dca03ded5..7d2b1da85951 100644
--- a/target/i386/kvm/tdx.c
+++ b/target/i386/kvm/tdx.c
@@ -544,7 +544,7 @@ static void tdx_guest_init(Object *obj)

qemu_mutex_init(&tdx->lock);

- tdx->attributes = 0;
+ tdx->attributes = TDX_TD_ATTRIBUTES_SEPT_VE_DISABLE;

object_property_add_bool(obj, "sept-ve-disable",
tdx_guest_get_sept_ve_disable,
--
2.34.1