This is the final bit of untangling for existing CPUID handling, as well as
the logical next step in nested-virt work to start making it usable.
Patch 4 was previously posted in isolation. It is unchanged in this series.
Andrew Cooper (8):
tools/libxl: Simplify DOMCTL_CDF_ flags handling in libxl__domain_make()
xen/domctl: Simplify DOMCTL_CDF_ checking logic
xen/domctl: Introduce and use XEN_DOMCTL_CDF_nested_virt
tools/cpuid: Plumb nested_virt down into xc_cpuid_apply_policy()
x86/hvm: Obsolete the use of HVM_PARAM_NESTEDHVM
xen/xsm: Drop xsm_hvm_param_nested()
x86/hvm: Drop restore boolean from hvm_cr4_guest_valid_bits()
x86/cpuid: Move VMX/SVM out of the default policy
tools/flask/policy/modules/xen.if | 2 +-
tools/libs/ctrl/include/xenctrl.h | 4 +--
tools/libs/guest/xg_cpuid_x86.c | 14 ++++------
tools/libxl/libxl_cpuid.c | 3 +-
tools/libxl/libxl_create.c | 13 ++++++---
tools/libxl/libxl_x86.c | 5 ----
tools/ocaml/libs/xc/xenctrl.ml | 1 +
tools/ocaml/libs/xc/xenctrl.mli | 1 +
xen/arch/x86/domain.c | 14 ++++++++--
xen/arch/x86/hvm/domain.c | 2 +-
xen/arch/x86/hvm/hvm.c | 41 ++++++---------------------
xen/arch/x86/hvm/svm/svmdebug.c | 6 ++--
xen/arch/x86/hvm/vmx/vmx.c | 2 +-
xen/arch/x86/hvm/vmx/vvmx.c | 2 +-
xen/common/domain.c | 43 +++++++++++++++++------------
xen/include/asm-x86/hvm/hvm.h | 2 +-
xen/include/asm-x86/hvm/nestedhvm.h | 5 ++--
xen/include/public/arch-x86/cpufeatureset.h | 4 +--
xen/include/public/domctl.h | 4 ++-
xen/include/public/hvm/params.h | 4 +--
xen/include/xsm/dummy.h | 6 ----
xen/include/xsm/xsm.h | 6 ----
xen/xsm/dummy.c | 1 -
xen/xsm/flask/hooks.c | 6 ----
xen/xsm/flask/policy/access_vectors | 2 --
25 files changed, 81 insertions(+), 112 deletions(-)
--
2.11.0