Re: SVSM draft specification

  Hi,

> However, even if we get a UEFI flash persistence service, updates to
> variables will again be the province of OVMF and the SVSM will just be
> providing backing storage.

No.  svsm will actually manage the variables and verify updates.
Current version can't handle pkcs7 signature verification yet, so the
secure boot variables are read-only for now.  Also they are not
persistent yet.  That is expected to change as crypto + storage support
in svsm improves.

take care,
  Gerd