From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4745337BE95 for ; Mon, 27 Jul 2026 18:43:19 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785177800; cv=none; b=rOugbl3lotA34R8u4SrWcIrIQ0l6fB8TrnRBJ6Fp9HfEOOdj9ls4jTMu35FSJcNEUcnCZ04+UJG91pmNQHcjlvOVvQYGbi3nT1o8KFB5H5vrCg1YLEruoQiS8dnt3x6M8fW/tEI+p1kYMidQuaqVJexxS3nX8QYvLe8TqIh1pkU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785177800; c=relaxed/simple; bh=cACNh47hFYOXZGMCrhriNnAwZaGdZuBO0z4Kt/W10FY=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=IH7HD1WgujALUzjs0pkCf64TRt9Vl0K7DYZpiXmxPnw9i9fFxDDd9WoNZ81fR/vqYCKrpCAsZRP3R+fzYSHjLsmhLNTH1O11YBTwTe4HP2jRC/r5o8X1z/i5LQPZL7nJWH/tN4as13kyn23U86oWpM1vkD4qX5hqGVdts8adoyc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=PXITOHPQ; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="PXITOHPQ" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1785177798; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=vv2vAxkyJsstkbuLMBlczqwE+kvJD6rbHIf1vCAI7nQ=; b=PXITOHPQd8pxeNHce1CIk62GSFuKvfF+BCZYF6HtDx5x0RGwMxeY4RAXOP15KionDRCzJR 0Jed3Z697qZL2oXV4VhnqI3dYJmNRfyhNQGN0wsJocQyLcfe07wxM0nAj+Yfc1NgB4HOal QS237Md4SpPlog1k8q7a628lCEvFOXM= Received: from mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-301-LJXkFmDhM_Gcj7PmxiWvcw-1; Mon, 27 Jul 2026 14:43:16 -0400 X-MC-Unique: LJXkFmDhM_Gcj7PmxiWvcw-1 X-Mimecast-MFC-AGG-ID: LJXkFmDhM_Gcj7PmxiWvcw_1785177794 Received: from mx-prod-int-06.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-06.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.93]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-03.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id C60A51955F28; Mon, 27 Jul 2026 18:43:12 +0000 (UTC) Received: from localhost (unknown [10.2.16.116]) by mx-prod-int-06.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 1C56318001E3; Mon, 27 Jul 2026 18:43:08 +0000 (UTC) Date: Mon, 27 Jul 2026 14:43:05 -0400 From: Stefan Hajnoczi To: Markus Armbruster Cc: Connor Kite , qemu-devel@nongnu.org, "Michael S. Tsirkin" , Stefano Garzarella , Alex =?iso-8859-1?Q?Benn=E9e?= , Viresh Kumar , Gerd Hoffmann , Mathieu Poirier , Manos Pitsidianakis , Haixu Cui , Raphael Norwitz , Kevin Wolf , Hanna Reitz , =?iso-8859-1?Q?Marc-Andr=E9?= Lureau , Paolo Bonzini , Fam Zheng , Milan Zamazal , Akihiko Odaki , Dmitry Osipenko , qemu-block@nongnu.org, virtio-fs@lists.linux.dev, "Gonglei (Arei)" , zhenwei pi , Daniel =?iso-8859-1?Q?P=2E_Berrang=E9?= , Eric Blake , Jason Wang , Peter Xu , Eugenio =?iso-8859-1?Q?P=E9rez?= , Alyssa Ross , Demi Marie Obenour Subject: Re: [PATCH RFC 03/15] backends/cryptodev-vhost-user: add memory isolation bool Message-ID: <20260727184305.GB371693@fedora> References: <20260723-vhost-user-isolated-memory-v1-0-6b97c439eb28@gmail.com> <20260723-vhost-user-isolated-memory-v1-3-6b97c439eb28@gmail.com> <87fr18diqb.fsf@pond.sub.org> Precedence: bulk X-Mailing-List: virtio-fs@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="gY0jI/gfOQgW8+h2" Content-Disposition: inline In-Reply-To: <87fr18diqb.fsf@pond.sub.org> X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.93 --gY0jI/gfOQgW8+h2 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jul 24, 2026 at 08:06:36AM +0200, Markus Armbruster wrote: > Connor Kite writes: > # @memory-isolation: disable access from cryptodev to guest memory. > # (default: false) (since 11.2) >=20 > Pardon my ignorance... What exactly is "cryptodev" here? Is it code > running in another process? >=20 > Should the description answer my question? Perhaps like this: >=20 > # @memory-isolation: isolate guest memory. Isolated guest memory > # cannot be accessed from uh, what exactly? >=20 > Fill in the blank. Maybe it's clearer to mention the potentially untrusted vhost-user backend process rather than cryptodev (the virtio-crypto vhost-user device)? Stefan --gY0jI/gfOQgW8+h2 Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEhpWov9P5fNqsNXdanKSrs4Grc8gFAmpnprkACgkQnKSrs4Gr c8hfjwgAsUY5rQK5VxV+u2eBHIXa6bJmd0kuVddy2fYB8K4GFM/E7Cd7jMEPNhmL WpVMMyTYqRcamqsSs8gXJYdXTXf7K6nO3zQW8n4vr6osXq9Ph/QRt+IkQd7RW2Rw gzYRf/pVUWBhMf14Ds2Ak8s11TsxEngt8ACu5SqrHQR9tvOT1GJ8WrLaljpuyfEP tTWPNSYXmUF//lXgopDaHni6khrALLfGgFTtT5/EEQlm8A8Bm7q5bNRGxdODz4DE 89UTlZ+cXmv8u9x2jyOXpvL0WtbTej/QhoNZYTetYlOkDE18/5CEFiFU/+sfeRfK pB4iLbwCio+f3owLNiHykyBb14H2ig== =k1yY -----END PGP SIGNATURE----- --gY0jI/gfOQgW8+h2--