x86/tdx: Limit the list of ACPI tables allowed

In order to reduce the attack surface, allow only necessary ACPI tables in TDX guest platforms. Current list of allowed tables are, XSDT,FACP,DSDT,FACS,APIC. Signed-off-by: Kuppuswamy Sathyanarayanan <sathyanarayanan.kuppuswamy@linux.intel.com>
intel · Nov 10, 2022 · d84774e · d84774e
1 parent 5df08b7
commit d84774e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/arch/x86/coco/tdx/filter.c b/arch/x86/coco/tdx/filter.c
@@ -265,5 +265,7 @@ void __init tdx_filter_init(void)
 		pr_debug("Device filter is overridden\n");
 	}
 
+	acpi_tbl_allow_setup("XSDT,FACP,DSDT,FACS,APIC");
+
 	pr_info("Enabled TDX guest device filter\n");
 }