Ruben Hakobyan dc6a56a0db vmm: vm_config: allow opening /dev/sev after landlock ...

On KVM, an SEV-SNP guest opens /dev/sev at VM creation and passes
its fd as kvm_sev_cmd.sev_fd. KVM uses it to issue the SNP_LAUNCH_*
commands. The open happens after the landlock ruleset is applied,
so grant rw access to /dev/sev when the sev_snp platform feature
is enabled.

Assisted-by: Claude:Opus-4.8
Signed-off-by: Ruben Hakobyan <hruben@meta.com>

2026-06-09 15:49:42 +00:00

..

src

vmm: vm_config: allow opening /dev/sev after landlock

2026-06-09 15:49:42 +00:00

build.rs

build: Add "fuzzing" as a valid cfg(..) attribute

2024-05-08 08:10:28 +00:00

Cargo.toml

vmm: omit unset Option fields from API responses

2026-06-03 15:47:38 +01:00