Re: [RFC PATCH v3 00/27] KVM SGX virtualization support

Dave Hansen
2021-02-03T17:47:05Z

On 2/3/21 9:43 AM, Paolo Bonzini wrote:
> On 03/02/21 18:36, Sean Christopherson wrote:
>> I'm not at all opposed to preventing KVM from accessing EPC, but I
>> really don't want to add a special check in KVM to avoid reading EPC.
>> KVM generally isn't aware of physical backings, and the relevant KVM
>> code is shared between all architectures.
>
> Yeah, special casing KVM is almost always the wrong thing to do.
> Anything that KVM can do, other subsystems will do as well.

Agreed. Thwarting ioremap itself seems like the right way to go.