# Re: \[PATCH 06/11\] x86/sev: Replace occurrences of sev\_es\_active() with prot\_guest\_has()

- From: Joerg Roedel \<joro@8bytes.org\>
- Date: 2021-08-02 10:45:29 
- List: linux-efi
- Page: https://ratatoskr.run/linux-efi/2021/08/211440
- Thread: https://ratatoskr.run/linuxppc-dev/2021/07/211118/t.md

```text
On Tue, Jul 27, 2021 at 05:26:09PM -0500, Tom Lendacky wrote:
> @@ -48,7 +47,7 @@ static void sme_sev_setup_real_mode(struct trampoline_header *th)
>  	if (prot_guest_has(PATTR_HOST_MEM_ENCRYPT))
>  		th->flags |= TH_FLAGS_SME_ACTIVE;
>  
> -	if (sev_es_active()) {
> +	if (prot_guest_has(PATTR_GUEST_PROT_STATE)) {
>  		/*
>  		 * Skip the call to verify_cpu() in secondary_startup_64 as it
>  		 * will cause #VC exceptions when the AP can't handle them yet.

Not sure how TDX will handle AP booting, are you sure it needs this
special setup as well? Otherwise a check for SEV-ES would be better
instead of the generic PATTR_GUEST_PROT_STATE.

Regards,

Joerg
```