Messages in this thread | | | Date | Wed, 25 Jan 2023 21:13:56 +0100 (CET) | From | Jiri Kosina <> | Subject | Re: Linux guest kernel threat model for Confidential Computing |
| |
On Wed, 25 Jan 2023, Greg Kroah-Hartman wrote:
> How do you trust you got real data on the disk? On the network? Those > are coming from the host, how is any of that data to be trusted? Where > does the trust stop and why?
This is all well described in AMD SEV-SNP documentation, see page 5 of [1]. All the external devices are treated as untrusted in that model.
[1] https://www.amd.com/system/files/TechDocs/SEV-SNP-strengthening-vm-isolation-with-integrity-protection-and-more.pdf
-- Jiri Kosina SUSE Labs
| |