From patchwork Thu Mar 3 09:49:45 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Jan Beulich X-Patchwork-Id: 12767272 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 4D298C433EF for ; Thu, 3 Mar 2022 09:50:12 +0000 (UTC) Received: from list by lists.xenproject.org with outflank-mailman.282879.481708 (Exim 4.92) (envelope-from ) id 1nPi5o-0006CA-KX; Thu, 03 Mar 2022 09:49:52 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 282879.481708; Thu, 03 Mar 2022 09:49:52 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1nPi5o-0006C3-Gq; Thu, 03 Mar 2022 09:49:52 +0000 Received: by outflank-mailman (input) for mailman id 282879; Thu, 03 Mar 2022 09:49:51 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1nPi5n-0006Bx-NA for xen-devel@lists.xenproject.org; Thu, 03 Mar 2022 09:49:51 +0000 Received: from de-smtp-delivery-102.mimecast.com (de-smtp-delivery-102.mimecast.com [194.104.109.102]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 44be1e15-9ad7-11ec-8539-5f4723681683; Thu, 03 Mar 2022 10:49:50 +0100 (CET) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-db3eur04lp2056.outbound.protection.outlook.com [104.47.12.56]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id de-mta-9-dEzZTFGSMk6CXB0S8ssZhg-1; Thu, 03 Mar 2022 10:49:49 +0100 Received: from VI1PR04MB5600.eurprd04.prod.outlook.com (2603:10a6:803:e7::16) by VI1PR0402MB2735.eurprd04.prod.outlook.com (2603:10a6:800:b5::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5017.25; Thu, 3 Mar 2022 09:49:47 +0000 Received: from VI1PR04MB5600.eurprd04.prod.outlook.com ([fe80::d479:b728:345c:bd65]) by VI1PR04MB5600.eurprd04.prod.outlook.com ([fe80::d479:b728:345c:bd65%6]) with mapi id 15.20.5038.014; Thu, 3 Mar 2022 09:49:47 +0000 X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" X-Inumbo-ID: 44be1e15-9ad7-11ec-8539-5f4723681683 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.com; s=mimecast20200619; t=1646300990; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=wxTlvrQrCrtfuzAef8q/M8aAHiBadKfLWySl/j0JE7c=; b=PtTywdLDu7G7ZJwzSj00A0mj6+NtdYeXpmmZS8Y1KoRjhkQNbacI0OOlKilyPYHGIi417C sbeXmQhu9CAUDLrVJ0YpaVoE3CybIO21/+vqiT99evT2D37cHqBEGMo/ULE9DVMTZQeQqG Zzu71bMGeylPxV1MijbRG2TZz3u1Wo8= X-MC-Unique: dEzZTFGSMk6CXB0S8ssZhg-1 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gYrGgKPI/fpkYm6TT4aeqb9QGWVk4/kN7ygU8nyYlO3ORP2SrOjG63hGuWF82CHoOSJpHTgqcfAh4+j59+jcIWo0JehsTm0Yg9iLk1NmxCA1GZpahZnlycmUYp28W3aUyQ12qeXyTpdK61W66yII0aJb7oD/dHEbkAb+E6UtPmE1Jeib87CjKIO/XS0ufSiiGiHD+9tFb3v8p8TlBs6sorNpnOZE8gXUXMtKguOSsxdMq7DP+1tKGOVsKImi6J2OgbP8JIBMLWte5vULOdAk0gEFw4MWYnRawGn8ufN319N4tJ4xtaCo3vbmw0iT/gqDD4U4kKPSmbhMVVcAHJfyPA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=wxTlvrQrCrtfuzAef8q/M8aAHiBadKfLWySl/j0JE7c=; b=kqVYZ/nwebh+jxxhhaA19Q2LJGt/guekUdQNQoLymAM+iWaW/QiuxunEu+PZ0Y9B5/25TBD+wsdEbYgKcKe9fzoa8rliCKIeyXu8qfmo0ifBhc6YbMBzomaPEHtDoDxTgOFQkH8t4xqAWe9YGlDxiVyYlsLV9aPLXE4TN0Cqo8+idnWB0x53Am5sJRDB2oZ/3DywBkw5A6+9vm8HQRY9Q8XnV8uA4Ba0Un+jSXw+rUGNHyALYawtK5g4yCtZnvquIFZHUQ7u2DG2EiKzhw5ZTAXE+XHiTz5F3Jr16Z7spywjluWQMRuDxMfoBjj/cgSPmhyXtDuFK9uy8CYVNTD0WQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=suse.com; dmarc=pass action=none header.from=suse.com; dkim=pass header.d=suse.com; arc=none Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=suse.com; Message-ID: Date: Thu, 3 Mar 2022 10:49:45 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.6.1 Content-Language: en-US To: "xen-devel@lists.xenproject.org" Cc: Andrew Cooper , Wei Liu , =?utf-8?q?Roger_Pau_Monn=C3=A9?= , Lukasz Hawrylko , Daniel Smith , =?utf-8?q?Mateusz_M=C3=B3wka?= From: Jan Beulich Subject: [PATCH] x86/tboot: adjust Kconfig default X-ClientProxiedBy: AM6PR0202CA0060.eurprd02.prod.outlook.com (2603:10a6:20b:3a::37) To VI1PR04MB5600.eurprd04.prod.outlook.com (2603:10a6:803:e7::16) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: d19d83cc-57f6-4e52-3eb7-08d9fcfb2726 X-MS-TrafficTypeDiagnostic: VI1PR0402MB2735:EE_ X-Microsoft-Antispam-PRVS: X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:VI1PR04MB5600.eurprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230001)(366004)(38100700002)(8936002)(2616005)(4744005)(36756003)(5660300002)(6512007)(83380400001)(186003)(2906002)(6916009)(26005)(6486002)(508600001)(66556008)(66476007)(8676002)(4326008)(31686004)(31696002)(316002)(6506007)(54906003)(66946007)(86362001)(43740500002)(45980500001);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?q?u0WESs1Jxp2ghGQ3slcbAAV88HNF?= =?utf-8?q?Mppq0+hKv9s4wPLfBAb7X7QD7/Iy2nAkmgCMTlv64Hi1ZnnMlsxU6Sn9Q2m0sS+sa?= =?utf-8?q?hoD6lnWgzH1QAxcdnt1MCF/CeJ3p52F2hYtcAHCZtereEIi+nn6BU6TsdyoO5IR/P?= =?utf-8?q?/tpLo5PPWCKCKA3emDLQl943FuoMJ4/ajiGhaCmISnibAQvm8Wobwoo6VIwQuLxFM?= =?utf-8?q?1luUJmbXxWw67cmY0tOmkSyJOzFknIKGzAloP9bSIx3UqsGJq6/Bk3ewSMDYoiXhr?= =?utf-8?q?mfafT734z9WlmIZQKpsYBck7WslNNLeA2rjCe62lmQiJ8GDdSTrMP8R/h1jKo1LzC?= =?utf-8?q?QxKdVzyrFReHuzJI0IWFiPYhPbu7UbInTRwMoOGhJoykCBVAwUspqdO3HrFGjjtge?= =?utf-8?q?/dAUxz88N3fDeeIRzAq0umy4SPdrajH7ByM85QrQbPni413mx2rUvDERi1llo+Qpt?= =?utf-8?q?WpArxOI/VPTkth1XZ330BqQ14oT8FBvVdRdqCVPZ78R1bWhLBn/RSqOjifQ6IRGqj?= =?utf-8?q?gpF34VXG1LvUWaEY216FzgMauf10E0oPym2ejcHZWWm9pa+d216N42BFNYWrWBUHz?= =?utf-8?q?hWqWfWan5gc7LjpWzClC8u3lG8b9NiTtIgE1ax847TwhUJJnQBBSiFI/6KhP4enO1?= =?utf-8?q?HlfR7skEynBfMeSWJv1hJ5MTBnjDefabKpjfLJvjsihjcPcPqnuOa9dTcpwJuxlwR?= =?utf-8?q?sxtyMGOcs9wsSARc1ZPF5dj3mf2006c+6TVNTU9xC8BVd1rB5juaFpARqAi0OY6Hf?= =?utf-8?q?KH4JNIei0DOa0hv8rWCvh2ueRqMdJjKJ34Fw9nGpEDiMF1or64gvIX/xgSZPYJ9/3?= =?utf-8?q?roLaEvy0ehMjnKvUIPsYI6PkfqeYiDpM3eaTp5V6RCkJvgVqQhg5bHU6MPKC2GJOe?= =?utf-8?q?DjFsocrWQsRb5QkaDZM83Sq+lkZFvX472W5QoeQ+1lBAR2fdRuuZ57ZMJiFx/mvlx?= =?utf-8?q?YuZ5O2DSnCneo6bbtrK5JQiVaeQq1JPf/nsGi68WouT3kcW0xrkf1YielHhqMnf29?= =?utf-8?q?LLil0J8MQCDq4mhBwvviS8F7Vw6vq0Gtr4vSygg/rkEyIQRWdaCWledi3HAjFZ8d9?= =?utf-8?q?c1iwOEoJLlVQdLluK5TYORetSi9kJXcg8aaGi9FYx8JrKKpWSCyOSspNn5Gf8ZWai?= =?utf-8?q?um9VTPAStjsfCZJN+ZQKMMVVpG1lVgXuKwCfod+MyhiD/3Mau5fAmgsoFnDwBMyvU?= =?utf-8?q?MAb8TAlfK26oZ82uuMwdT17sXHgwVymatt7d1IOyyH4Lld0xv2tsF0oLjL6dS0weQ?= =?utf-8?q?xFmIpK4BjEmzrMpNm4HSh1XWJ3LWpKJKo5LZwMkEpJi6otQkTkVyzJcs33Moshkdp?= =?utf-8?q?KFUA3Nkyn4yS/XZEatqK9iQyVCwdPGmRgCtN96SCWNYx9DYqGdRDmsDNCQMAGlf0p?= =?utf-8?q?+wUCx+huATGS40XPUSi5Q5G9TYmjDqMny01jT2e3pKMUy/47UOEV80rP9rmK6Iq1t?= =?utf-8?q?VHclYuXbbYQBOymkK0EleUPrtFw9JMo8aPVZPaBjRaVVw8StSUkBOrxTu/B70kBNR?= =?utf-8?q?fPZdkOSY/2ysLiA2iwXffqpAp1UNNPy+45TYQDzVy8RJBBcLtoGDhm0=3D?= X-OriginatorOrg: suse.com X-MS-Exchange-CrossTenant-Network-Message-Id: d19d83cc-57f6-4e52-3eb7-08d9fcfb2726 X-MS-Exchange-CrossTenant-AuthSource: VI1PR04MB5600.eurprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Mar 2022 09:49:47.6100 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: f7a17af6-1c5c-4a36-aa8b-f5be247aa4ba X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: dzZSjaepR4fdZsbyXyt6+tPbUE/yTzktDKQmjYin1gNStcgUjsXNOqe/fgh+rwA2s0wVajyV/qt18PqjXCD1eA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0402MB2735 We shouldn't include unsupported code by default, with not even a means for its building to be disabled. Convert the dependency from merely affecting the prompt's visibility to a real one. Signed-off-by: Jan Beulich Reviewed-by: Daniel P. Smith --- We could of course go further and make the default also account for DEBUG, as is done elsewhere. --- a/xen/arch/x86/Kconfig +++ b/xen/arch/x86/Kconfig @@ -193,14 +193,15 @@ config HVM_FEP If unsure, say N. config TBOOT - bool "Xen tboot support (UNSUPPORTED)" if UNSUPPORTED - default y if !PV_SHIM_EXCLUSIVE + bool "Xen tboot support (UNSUPPORTED)" + depends on UNSUPPORTED + default !PV_SHIM_EXCLUSIVE select CRYPTO ---help--- Allows support for Trusted Boot using the Intel(R) Trusted Execution Technology (TXT) - If unsure, say Y. + If unsure, stay with the default. choice prompt "Alignment of Xen image"