By design the uv-device does not check whether an incoming attestation
measurement request only specifies valid plaintext flags or has the
right request version, as these values are verified by the Ultravisor
anyway. However, the userspace program that generates these requests
might want to know which flags/versions are supported in order to
create requests without trial and error. Therefore, we must expose the
supported plaintext flags and versions to userspace.
since v1:
* rebased on Janosch's "kvm: s390: Add PV dump support" series
* added rationale as this cover letter
Steffen Eiden (1):
s390: Add attestation query information
arch/s390/boot/uv.c | 2 ++
arch/s390/include/asm/uv.h | 7 ++++++-
arch/s390/kernel/uv.c | 20 ++++++++++++++++++++
3 files changed, 28 insertions(+), 1 deletion(-)
--
2.30.2
On Wed, May 18, 2022 at 01:59:07PM +0000, Steffen Eiden wrote:
> By design the uv-device does not check whether an incoming attestation
> measurement request only specifies valid plaintext flags or has the
> right request version, as these values are verified by the Ultravisor
> anyway. However, the userspace program that generates these requests
> might want to know which flags/versions are supported in order to
> create requests without trial and error. Therefore, we must expose the
> supported plaintext flags and versions to userspace.
>
> since v1:
> * rebased on Janosch's "kvm: s390: Add PV dump support" series
> * added rationale as this cover letter
Thanks for adding the cover letter! However what I really meant (and
failed to write) is that the rationale should be part of the patch
description. Anyway; whoever picks this patch will hopefully integrate
your cover letter description into the commit.