tree d8296f9e61f47aa7b600ea5c528a91af5911acf0
parent cfb917a17d3df75243199ad8bad7e9505fd79468
author Paolo Bonzini <pbonzini@redhat.com> 1503568771 +0200
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1504081305 +0200

KVM: x86: block guest protection keys unless the host has them enabled

commit c469268cd523245cc58255f6696e0c295485cb0b upstream.

If the host has protection keys disabled, we cannot read and write the
guest PKRU---RDPKRU and WRPKRU fail with #GP(0) if CR4.PKE=0.  Block
the PKU cpuid bit in that case.

This ensures that guest_CR4.PKE=1 implies host_CR4.PKE=1.

Fixes: 1be0e61c1f255faaeab04a390e00c8b9b9042870
Reviewed-by: David Hildenbrand <david@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>