<cpu match='exact'> <model>Penryn</model> <feature name='vmx' policy='disable'/> </cpu>