"Dr. David Alan Gilbert" <[email protected]> writes: > So you would think that would tkae care of RDSEED exiting - but what > about VMCS shadowing? >
SECONDARY_EXEC_SHADOW_VMCS is special, we are able to emulate it in KVM
even when it is not supported by hardware, see
nested_vmx_setup_ctls_msrs():
/*
* We can emulate "VMCS shadowing," even if the hardware
* doesn't support it.
*/
msrs->secondary_ctls_high |=
SECONDARY_EXEC_SHADOW_VMCS;
--
Vitaly
