feature request: check host mitigation status

[katexochen]

As of SEV ABI Spec revision 1.58, there is the possibility to check the host mitigation status (Sec. 3.5.2, Sec. 8.39) via SNP_VERIFY_MITIGATION. Not sure if his should have its own subcommand or be integrated in snphost ok.

[tylerfanelli]

snphost ok seems like the sensible place for this to be added, rather than its own subcommand. WDYT @DGonzalezVillal? There's also guest mitigation statuses which should be added to snpguest.

[katexochen]

The spec reads like this is feature is kind of interactive. You can't only request the status of mitigations, but also request application of a specific mitigation on the host? Not sure I fully understand that feature yet..

[tylerfanelli]

@DGonzalezVillal Can you explain this feature? If it includes user requests for application of specific mitigations on a host, then it likely deserves its own subcommand.

[DGonzalezVillal]

Support for this feature is not in kernel yet, so we can't implement in the tooling just yet. It will probably make the most sense to to have it's own subcommand although