diff --git a/vmm/src/vm_config.rs b/vmm/src/vm_config.rs index 5adf293ff..0ce723ffc 100644 --- a/vmm/src/vm_config.rs +++ b/vmm/src/vm_config.rs @@ -1242,6 +1242,11 @@ impl VmConfig { payload.apply_landlock(&mut landlock)?; } + #[cfg(feature = "sev_snp")] + if self.platform.as_ref().is_some_and(|p| p.sev_snp) { + landlock.add_rule_with_access(Path::new("/dev/sev"), "rw")?; + } + if let Some(tpm_config) = &self.tpm { tpm_config.apply_landlock(&mut landlock)?; }