diff options
author | Paolo Bonzini <pbonzini@redhat.com> | 2021-02-26 04:54:45 -0500 |
---|---|---|
committer | Paolo Bonzini <pbonzini@redhat.com> | 2021-03-02 14:30:45 -0500 |
commit | b59b153d1026b73deb032d01bb9319ebba896006 (patch) | |
tree | c51a8fe48de9c34c3a778eb9e798563c6abac176 /arch/x86/kvm/Kconfig | |
parent | c462f859f895840e7cd4f20f822ad4c6df2db489 (diff) | |
download | lwn-b59b153d1026b73deb032d01bb9319ebba896006.tar.gz lwn-b59b153d1026b73deb032d01bb9319ebba896006.zip |
KVM: x86: allow compiling out the Xen hypercall interface
The Xen hypercall interface adds to the attack surface of the hypervisor
and will be used quite rarely. Allow compiling it out.
Suggested-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: David Woodhouse <dwmw@amazon.co.uk>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'arch/x86/kvm/Kconfig')
-rw-r--r-- | arch/x86/kvm/Kconfig | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/arch/x86/kvm/Kconfig b/arch/x86/kvm/Kconfig index 7ac592664c52..a788d5120d4d 100644 --- a/arch/x86/kvm/Kconfig +++ b/arch/x86/kvm/Kconfig @@ -103,6 +103,15 @@ config KVM_AMD_SEV Provides support for launching Encrypted VMs (SEV) and Encrypted VMs with Encrypted State (SEV-ES) on AMD processors. +config KVM_XEN + bool "Support for Xen hypercall interface" + depends on KVM + help + Provides KVM support for the hosting Xen HVM guests and + passing Xen hypercalls to userspace. + + If in doubt, say "N". + config KVM_MMU_AUDIT bool "Audit KVM MMU" depends on KVM && TRACEPOINTS |