Re: Linux guest kernel threat model for Confidential Computing

[Jiri Kosina]

On Wed, 25 Jan 2023, Greg Kroah-Hartman wrote:

> How do you trust you got real data on the disk?  On the network?  Those 
> are coming from the host, how is any of that data to be trusted?  Where 
> does the trust stop and why?

This is all well described in AMD SEV-SNP documentation, see page 5 of 
[1]. All the external devices are treated as untrusted in that model.

[1] https://www.amd.com/system/files/TechDocs/SEV-SNP-strengthening-vm-isolation-with-integrity-protection-and-more.pdf

-- 
Jiri Kosina
SUSE Labs