<cpu mode='custom' match='exact'>
  <model fallback='allow'>SandyBridge</model>
  <vendor>Intel</vendor>
  <feature policy='require' name='hypervisor'/>
  <feature policy='require' name='osxsave'/>
  <feature policy='require' name='pcid'/>
  <feature policy='require' name='ss'/>
  <feature policy='require' name='vme'/>
  <feature policy='disable' name='rdtscp'/>
  <feature policy='require' name='lahf_lm'/>
  <feature policy='require' name='lm'/>
  <feature policy='require' name='nx'/>
  <feature policy='require' name='syscall'/>
  <feature policy='require' name='avx'/>
  <feature policy='require' name='xsave'/>
  <feature policy='require' name='aes'/>
  <feature policy='require' name='tsc-deadline'/>
  <feature policy='require' name='popcnt'/>
  <feature policy='require' name='x2apic'/>
  <feature policy='require' name='sse4.2'/>
  <feature policy='require' name='sse4.1'/>
  <feature policy='require' name='cx16'/>
  <feature policy='require' name='ssse3'/>
  <feature policy='require' name='pclmuldq'/>
  <feature policy='require' name='pni'/>
  <feature policy='require' name='sse2'/>
  <feature policy='require' name='sse'/>
  <feature policy='require' name='fxsr'/>
  <feature policy='require' name='mmx'/>
  <feature policy='require' name='clflush'/>
  <feature policy='require' name='pse36'/>
  <feature policy='require' name='pat'/>
  <feature policy='require' name='cmov'/>
  <feature policy='require' name='mca'/>
  <feature policy='require' name='pge'/>
  <feature policy='require' name='mtrr'/>
  <feature policy='require' name='sep'/>
  <feature policy='require' name='apic'/>
  <feature policy='require' name='cx8'/>
  <feature policy='require' name='mce'/>
  <feature policy='require' name='pae'/>
  <feature policy='require' name='msr'/>
  <feature policy='require' name='tsc'/>
  <feature policy='require' name='pse'/>
  <feature policy='require' name='de'/>
  <feature policy='require' name='fpu'/>
</cpu>