acrn-hypervisor/hypervisor
Binbin Wu f32b59d73d hv: disable mpx capability for guest
This patch hide Memory Protection Extention (MPX) capability from guest.

- vCPUID change:
  Clear cpuid.07H.0.ebx[14]
  Clear cpuid.0DH.0.eax[4:3]
- vMSR change:
  Add MSR_IA32_BNDCFGS to un-supported MSR array.
- XCR0[4:3] is not allowed to set by guest.

Tracked-On: #2821
Signed-off-by: Binbin Wu <binbin.wu@intel.com>
Acked-by: Eddie Dong <eddie.dong@intel.com>
2019-03-20 13:07:31 +08:00
..
arch/x86 hv: disable mpx capability for guest 2019-03-20 13:07:31 +08:00
boot hv: minor fixes to a few calls to strncpy_s() 2019-03-20 08:55:42 +08:00
bsp hv: merge SBL and UEFI related stuff under boot 2019-03-13 10:26:55 +08:00
common hv: cleanup some hva/hpa conversion code 2019-03-15 09:03:14 +08:00
debug hv: minor fixes to a few calls to strncpy_s() 2019-03-20 08:55:42 +08:00
dm HV: unify the sharing mode and partition mode coding style for similar functions 2019-03-20 12:04:42 +08:00
hw pci.c: assert MSIX table count <= config max 2019-03-08 23:04:12 +08:00
include hv: disable mpx capability for guest 2019-03-20 13:07:31 +08:00
lib hv: fix identifier reuse violations in sha256.c 2019-01-16 10:24:49 +08:00
release hv:cleanup header files for release folder 2019-02-28 12:52:36 +08:00
scripts hv: remove CONFIG_PLATFORM_[SBL|UEFI] and UEFI_STUB 2019-03-13 10:26:55 +08:00
Kconfig
MAINTAINERS
Makefile hv: remove CONFIG_PARTITION_MODE for pre-launched VM vE820 creation 2019-03-19 14:28:43 +08:00
README.rst doc: fix utf-8 punctuation, branding, spelling 2019-03-14 09:13:58 -07:00

README.rst

ACRN Hypervisor
###############

The open source `Project ACRN`_ defines a device hypervisor reference stack and
an architecture for running multiple software subsystems, managed securely, on
a consolidated system by means of a virtual machine manager. It also defines a
reference framework implementation for virtual device emulation, called the
"ACRN Device Model".

The ACRN Hypervisor is a Type 1 reference hypervisor stack, running directly on
the bare-metal hardware, and is suitable for a variety of IoT and embedded
device solutions. The ACRN hypervisor addresses the gap that currently exists
between datacenter hypervisors, and hard partitioning hypervisors. The ACRN
hypervisor architecture partitions the system into different functional
domains, with carefully selected guest OS sharing optimizations for IoT and
embedded devices.

You can find out more about Project ACRN on the `Project ACRN documentation`_
website.

.. _`Project ACRN`: https://projectacrn.org
.. _`ACRN Hypervisor`: https://github.com/projectacrn/acrn-hypervisor
.. _`Project ACRN documentation`: https://projectacrn.github.io/