On Mon, Jul 19, 2021, Brijesh Singh wrote:

On 7/19/21 12:18 PM, Sean Christopherson wrote:

quoted

quoted

Okay, I will add helper to make things easier. One case where we will
need to directly call the rmpupdate() is during the LAUNCH_UPDATE
command. In that case the page is private and its immutable bit is also
set. This is because the firmware makes change to the page, and we are
required to set the immutable bit before the call.

Or do "int rmp_make_firmware(u64 pfn, bool immutable)"?

That's not what we need.

We need 'rmp_make_private() + immutable' all in one RMPUPDATE.  Here is the
snippet from SNP_LAUNCH_UPDATE.

Ah, not firmwrare, gotcha.  But we can still use a helper, e.g. an inner
double-underscore helper, __rmp_make_private().