| From | Andy Lutomirski <> | Date | Mon, 13 May 2019 08:46:22 -0700 | Subject | Re: [RFC KVM 02/27] KVM: x86: Introduce address_space_isolation module parameter |
| |
On Mon, May 13, 2019 at 7:39 AM Alexandre Chartre <alexandre.chartre@oracle.com> wrote: > > From: Liran Alon <liran.alon@oracle.com> > > Add the address_space_isolation parameter to the kvm module. > > When set to true, KVM #VMExit handlers run in isolated address space > which maps only KVM required code and per-VM information instead of > entire kernel address space.
Does the *entry* also get isolated? If not, it seems less useful for side-channel mitigation.
|