mirror of
https://github.com/projectacrn/acrn-hypervisor.git
synced 2026-01-04 23:24:56 +00:00
HV: enable SMEP in hypervisor
- this patch is to enable SMEP in hypervisor, SMEP protects guests' memory from supervisor-mode instruction fetches, in other words, hypervisor which operating in supervisor mode can't fetch instructions from (guests' memory) linear addresses that are accessible in user mode. Signed-off-by: Yonghua Huang <yonghua.huang@intel.com>
This commit is contained in:
@@ -84,6 +84,8 @@
|
||||
#define CR4_SMXE (1<<14) /* SMX enable */
|
||||
#define CR4_PCIDE (1<<17) /* PCID enable */
|
||||
#define CR4_OSXSAVE (1<<18)
|
||||
#define CR4_SMEP (1<<20)
|
||||
#define CR4_SMAP (1<<21)
|
||||
/* XSAVE and Processor Extended States enable bit */
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user