Re: [PATCH] KVM: allow compiling out SMM support

From: Sean Christopherson
Date: Thu Sep 29 2022 - 16:38:20 EST


On Thu, Sep 29, 2022, Paolo Bonzini wrote:
> The two Kconfig entries for SMM and XEN are more for things that you want to
> remove to reduce attack surface than for testing.

Yep, we want to disable SMM to reduce KVM's attack/bug surface. Any performance
benefits are bonus side effects.