Re: [RFC PATCH v2 03/20] x86: Secure Memory Encryption (SME) build enablement

From: Tom Lendacky
Date: Wed Sep 07 2016 - 10:04:07 EST


On 09/02/2016 06:03 AM, Borislav Petkov wrote:
> On Mon, Aug 22, 2016 at 05:35:59PM -0500, Tom Lendacky wrote:
>> Provide the Kconfig support to build the SME support in the kernel.
>>
>> Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
>> ---
>> arch/x86/Kconfig | 9 +++++++++
>> 1 file changed, 9 insertions(+)
>>
>> diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig
>> index c580d8c..131f329 100644
>> --- a/arch/x86/Kconfig
>> +++ b/arch/x86/Kconfig
>> @@ -1357,6 +1357,15 @@ config X86_DIRECT_GBPAGES
>> supports them), so don't confuse the user by printing
>> that we have them enabled.
>>
>> +config AMD_MEM_ENCRYPT
>> + bool "Secure Memory Encryption support for AMD"
>
> "AMD Secure Memory Encryption support"

Ok.

Thanks,
Tom

>
>> + depends on X86_64 && CPU_SUP_AMD
>> + ---help---
>> + Say yes to enable the encryption of system memory. This requires
>> + an AMD processor that supports Secure Memory Encryption (SME).
>> + The encryption of system memory is disabled by default but can be
>> + enabled with the mem_encrypt=on command line option.
>> +
>> # Common NUMA Features
>> config NUMA
>> bool "Numa Memory Allocation and Scheduler Support"
>