Enable restricted injection when running from IGVM

Signed-off-by: Jon Lange <jlange@microsoft.com>
coconut-svsm · Jan 2, 2024 · c519e39 · c519e39
1 parent 1f06992
commit c519e39
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/igvmbld/igvmbld.c b/igvmbld/igvmbld.c
@@ -357,7 +357,7 @@ void generate_initial_vmsa(SEV_VMSA *vmsa)
     vmsa->rip = 0x10000;
     vmsa->rsp = vmsa->rip - sizeof(Stage2Stack);
 
-    vmsa->sev_features = SevFeature_Snp;
+    vmsa->sev_features = SevFeature_Snp | SevFeature_RestrictInj;
 }
 
 void setup_igvm_platform_header(void)

diff --git a/igvmbld/sev-snp.h b/igvmbld/sev-snp.h
@@ -77,3 +77,4 @@ enum {
 };
 
 #define SevFeature_Snp          0x0001
+#define SevFeature_RestrictInj	0x0008
Original file line number	Diff line number	Diff line change
Expand Up		@@ -77,3 +77,4 @@ enum {
		};

		#define SevFeature_Snp 0x0001
		#define SevFeature_RestrictInj 0x0008