Re: [PATCH v4 0/4] SEV-SNP guest policy bit support updates

Sean Christopherson
2025-11-13T18:54:18Z

On Mon, Oct 27, 2025, Tom Lendacky wrote:
> This series aims to allow more flexibility in specifying SEV-SNP policy
> bits by improving discoverability of supported policy bits from userspace
> and enabling support for newer policy bits.

...

> Tom Lendacky (4):
> KVM: SEV: Consolidate the SEV policy bits in a single header file
> crypto: ccp - Add an API to return the supported SEV-SNP policy bits
> KVM: SEV: Publish supported SEV-SNP policy bits
> KVM: SEV: Add known supported SEV-SNP policy bits
>
> arch/x86/include/uapi/asm/kvm.h | 1 +
> arch/x86/kvm/svm/sev.c | 45 ++++++++++++++++++++-------------
> arch/x86/kvm/svm/svm.h | 3 ---
> drivers/crypto/ccp/sev-dev.c | 37 +++++++++++++++++++++++++++
> include/linux/psp-sev.h | 39 ++++++++++++++++++++++++++++
> 5 files changed, 105 insertions(+), 20 deletions(-)

Looks good overall, just the one minor nit. Given that this adds new KVM uAPI,
and the CCP changes are fairly minor in the grand scheme, my preference would be
to take the entire series through kvm-x86 (with Acks as appropriate).