Trying to switch EPTP for execute-protecting guest pages

["Estrada, Zachary J" <zestrad2@illinois.edu>]

Hi all,

I'm playing around with EPTs and kvm to track execution in the guest.  I've 
created a separate set of EPTs (and copied the last level entries from the real 
tables, minus execute permissions) but I'm not getting exits where I expect. I 
also have code in handle_ept_violation to preserve those permissions for any 
non-execute ept violations.

Here is what I am calling within a VM Exit handler:
---
kvm_mmu_unload(vcpu);
vcpu->arch.mmu.root_hpa = eptp;
kvm_x86_ops->set_tdp_cr3(vcpu, eptp);
kvm_mmu_load(vcpu);
kvm_flush_remote_tlbs(vcpu->kvm);
---

I think some of this is overkill, but am I missing something? I think I may need 
to flush the rmaps too, but I'm not exactly sure how.

I am using Haswell if that matters.

Thank you very much for your help!
--Zak