Messages in this thread | | | Subject | Re: [RFC] KVM: mm: fd-based approach for supporting KVM guest private memory | From | David Hildenbrand <> | Date | Tue, 31 Aug 2021 22:15:40 +0200 |
| |
On 31.08.21 22:01, Andi Kleen wrote: > >>> Thanks a lot for this summary. A question about the requirement: do >>> we or >>> do we not have plan to support assigned device to the protected VM? >> >> Good question, I assume that is stuff for the far far future. > > It is in principle possible with the current TDX, but not secure. But > someone might decide to do it. So it would be good to have basic support > at least.
Can you elaborate the "not secure" part? Do you mean, making the device only access "shared" memory, not secure/encrypted/whatsoever?
-- Thanks,
David / dhildenb
| |