Received-SPF: pass (google.com: domain of linux-kernel+bounces-146313-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223;
Date: Mon, 15 Apr 2024 23:03:14 -0700
From: Dan Williams <dan.j.williams@intel.com>
To: Tom Lendacky <thomas.lendacky@amd.com>, <linux-kernel@vger.kernel.org>,
	<x86@kernel.org>, <linux-coco@lists.linux.dev>, <svsm-devel@coconut-svsm.dev>
CC: Thomas Gleixner <tglx@linutronix.de>, Ingo Molnar <mingo@redhat.com>,
	Borislav Petkov <bp@alien8.de>, Dave Hansen <dave.hansen@linux.intel.com>,
	"H. Peter Anvin" <hpa@zytor.com>, Andy Lutomirski <luto@kernel.org>, "Peter
 Zijlstra" <peterz@infradead.org>, Dan Williams <dan.j.williams@intel.com>,
	Michael Roth <michael.roth@amd.com>, Ashish Kalra <ashish.kalra@amd.com>,
	Joel Becker <jlbec@evilplan.org>, Christoph Hellwig <hch@lst.de>
Subject: Re: [PATCH v3 13/14] x86/sev: Hide SVSM attestation entries if not
 running under an SVSM
Message-ID: <661e14a2cdb12_4d561294c7@dwillia2-mobl3.amr.corp.intel.com.notmuch>
References: <cover.1711405593.git.thomas.lendacky@amd.com>
 <67893f352bc54de61160bfe251cba0bdf0431f37.1711405593.git.thomas.lendacky@amd.com>
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <67893f352bc54de61160bfe251cba0bdf0431f37.1711405593.git.thomas.lendacky@amd.com>
Precedence: bulk
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?vZoD+3wP5L6fzoKE4wWaQFC0JX4Ixdjbcutjv0HabfHXKk+4s/tu1HHU7SuB?=
 =?us-ascii?Q?nutsI4kvlyfrW9bahqzNG8cWHxRTUrvqqC/xRYS0POpQCZWYwwVVs3m7o8Cz?=
 =?us-ascii?Q?0xpwGlnZHLNYRciEFnVlmKfx0T1rNEaNYa4ij1Tca1RsznatgmUgdp0kuxh6?=
 =?us-ascii?Q?5ygtIC7mjf2bBPqZ+HaHrkfbflA8x/zoXSV7ZuYMRDPlYS137dGuWQE8f4L7?=
 =?us-ascii?Q?riVto777VJfn5O6ov3DnajztR8mKiBq/aoM1CunkmQ3DsJZsswp4q057Rmfh?=
 =?us-ascii?Q?+OqflhQRvOc/xYrYlhFquhSvUum0rhAASMjdrPSjslAh0VSL403+CRxajL5w?=
 =?us-ascii?Q?ZgUn7lgbBZ7o/EgGA3gpbzcZq3RPHsmIRs4xEkMXB4gImjJJc1yU+/sJacIW?=
 =?us-ascii?Q?74yEbMbL/VR1EJaVDwzqpX/ugp8V7gARzoZn+4dG1EByybw6dOjKXVz89fBN?=
 =?us-ascii?Q?bWBUuaIu8RQ4T+lLLevkjh+9QgRW4utjMo+8txW32ALGAMVCpnuxRjYELHPr?=
 =?us-ascii?Q?nEKMEmQI9BtOh19nA+a7cVScfuDykmZZetcH0UkmusDK8iB+v+1nghawRd45?=
 =?us-ascii?Q?W8Dt27JfK/8yxIgYIYddztSGBBQfk4PKf+GF/XJXvz0+g4tfaMkrO3YiDU6w?=
 =?us-ascii?Q?G97Bu7W4EPFU2GZzPk6VBvQ1ipWuNnoHpVyXI7f8kBuHD3dM+fHztJ7g7yZn?=
 =?us-ascii?Q?KRKsB1LGyIn7Bq80+nsw/5H/EJZjoN2P4IoIDOnzallc818MvbcSO2YgqxPS?=
 =?us-ascii?Q?yLNJZcMALVrc00Zham7UbZ2N0xRKbdOivfOo6u7SidFt8bIMzS1hlHy3DidB?=
 =?us-ascii?Q?A6WUPwsaAiuRw4qhzxBA0te3hqp6VuoIe5LSIyN3WhySwblFeTg3vV4wdyRA?=
 =?us-ascii?Q?Ol6ebdqp1KINVyiS0N1DGH/ePtlkfeYsKfnEsyxOrcQq9rTMM8uP9yKpgb2s?=
 =?us-ascii?Q?O1rYYheXxQVQ5w0xW7SRO7EXzMOoIrdFtiW4BvgFxVQZAUj87xnusKke7Quc?=
 =?us-ascii?Q?lexAsAx4YFGzhab1ogF7D5X+kv56HYEdTJNsq6aakhTcTtrbryTw4Gkn5CNx?=
 =?us-ascii?Q?WE6rt+LU9JuzauC+Hc3XfCUeVRx6/CxLwKnOioj7e8QIV7pRW2zmk3u9lVwp?=
 =?us-ascii?Q?KgbQQKt31YCtZA/U0O59vcQ99vwLZ0auZoXPCMWrMyZPjpdY0Zk8pyC2ls9Q?=
 =?us-ascii?Q?OUajSjks2N79gW/A5vu+b8KA2P7X2693JiLqV9s2PTDg8WWB8hF1jVy5ll4Z?=
 =?us-ascii?Q?aoXoR9G+B2vAxSbYQxH6xsWZATpq23pBWlwX6SUBNGcTWRiJSLxecmXm6fGq?=
 =?us-ascii?Q?YBCq07q0Fxjuvn9kQlRc15aoQqlqb7PMGL+FyzV80HOqetNOmroofDQ3T9q+?=
 =?us-ascii?Q?AhZI2Mes2f6RJzS4BA+IdonTbtnrTsVHlDplWCtvd7q/CY+N1F4EkNaXglTU?=
 =?us-ascii?Q?cDsEZRB7K9HKaHI6uplECGYrm8+YYVYG+c5gaWTT2Mk3Jvc13aEGQKkwF/ND?=
 =?us-ascii?Q?kE+1uH6pcm5vTrTdqRJpB+Y+5ulGCLojPeSQkEYuBVrSvrJe2JzLJpebD+Y1?=
 =?us-ascii?Q?ih7cXWFSwiG5NHcWZe1RezMoTmWuhNGN0u33D3YaXNA/+ceFz8dmR+6a6OnK?=
 =?us-ascii?Q?pw=3D=3D?=
X-MS-Exchange-CrossTenant-Network-Message-Id: 2475074f-d3e7-4674-c5ad-08dc5ddae90f
X-MS-Exchange-CrossTenant-AuthSource: PH8PR11MB8107.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Apr 2024 06:03:17.5182
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 46c98d88-e344-4ed4-8496-4ed7712e255d
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 1BrgY4rIkHOaJsgTcPOzcRnJnOHpwpirMsdffJaAZVVRkINOkhQN5qECxuZ0yTa/yQHc/T2l+K9cEui7V0qlWtVURKOc/9usGwbaGAUVpzU=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR11MB8471
X-OriginatorOrg: intel.com

Tom Lendacky wrote:
> Config-fs provides support to hide individual attribute entries. Using
> this support, base the display of the SVSM related entries on the presence
> of an SVSM.
> 
> Cc: Joel Becker <jlbec@evilplan.org>
> Cc: Christoph Hellwig <hch@lst.de>
> Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
> ---
>  arch/x86/coco/core.c        |  4 ++++
>  drivers/virt/coco/tsm.c     | 14 ++++++++++----
>  include/linux/cc_platform.h |  8 ++++++++
>  3 files changed, 22 insertions(+), 4 deletions(-)
> 
> diff --git a/arch/x86/coco/core.c b/arch/x86/coco/core.c
> index d07be9d05cd0..efa0f648f754 100644
> --- a/arch/x86/coco/core.c
> +++ b/arch/x86/coco/core.c
> @@ -12,6 +12,7 @@
>  
>  #include <asm/coco.h>
>  #include <asm/processor.h>
> +#include <asm/sev.h>
>  
>  enum cc_vendor cc_vendor __ro_after_init = CC_VENDOR_NONE;
>  u64 cc_mask __ro_after_init;
> @@ -78,6 +79,9 @@ static bool noinstr amd_cc_platform_has(enum cc_attr attr)
>  	case CC_ATTR_GUEST_STATE_ENCRYPT:
>  		return sev_status & MSR_AMD64_SEV_ES_ENABLED;
>  
> +	case CC_ATTR_GUEST_SVSM_PRESENT:
> +		return snp_get_vmpl();
> +
>  	/*
>  	 * With SEV, the rep string I/O instructions need to be unrolled
>  	 * but SEV-ES supports them through the #VC handler.
> diff --git a/drivers/virt/coco/tsm.c b/drivers/virt/coco/tsm.c
> index 46f230bf13ac..d30471874e87 100644
> --- a/drivers/virt/coco/tsm.c
> +++ b/drivers/virt/coco/tsm.c
> @@ -64,6 +64,12 @@ static struct tsm_report_state *to_state(struct tsm_report *report)
>  	return container_of(report, struct tsm_report_state, report);
>  }
>  
> +static bool provider_visibility(const struct config_item *item,
> +				const struct configfs_attribute *attr)
> +{
> +	return cc_platform_has(CC_ATTR_GUEST_SVSM_PRESENT);
> +}

I expect this needs to be a callback into the provider ops because one
of the other use cases for this visibility check is to get rid of the
"extra" attributes and handle that visibility with the same mechanism.