From mboxrd@z Thu Jan 1 00:00:00 1970 From: Valentine Sinitsyn Subject: Re: Nested paging in nested SVM setup Date: Thu, 21 Aug 2014 17:16:47 +0600 Message-ID: <53F5D51F.2010900@gmail.com> References: <53A179C4.9060203@gmail.com> <53A18A6D.2050407@siemens.com> <53F44440.6070408@gmail.com> <53F44645.2000708@redhat.com> <53F45036.1070309@gmail.com> <53F45832.5080708@redhat.com> <53F59192.3070500@gmail.com> <53F5B250.3000206@gmail.com> <53F5D251.60009@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit To: Paolo Bonzini , Jan Kiszka , kvm@vger.kernel.org Return-path: Received: from mail-la0-f43.google.com ([209.85.215.43]:45574 "EHLO mail-la0-f43.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753955AbaHULQw (ORCPT ); Thu, 21 Aug 2014 07:16:52 -0400 Received: by mail-la0-f43.google.com with SMTP id gi9so5855586lab.2 for ; Thu, 21 Aug 2014 04:16:51 -0700 (PDT) In-Reply-To: <53F5D251.60009@redhat.com> Sender: kvm-owner@vger.kernel.org List-ID: On 21.08.2014 17:04, Paolo Bonzini wrote: > I think it's just a bug. Nobody thought that you'd let L2 access L1's Sure, this is by no means a common use case. However can be seen as a flaw that lets the malicious guest to affects others by mapping and reprogramming APICs or other. Valentine