Messages in this thread | | | Date | Mon, 30 Jan 2023 10:14:43 -0500 | From | "Michael S. Tsirkin" <> | Subject | Re: Linux guest kernel threat model for Confidential Computing |
| |
On Mon, Jan 30, 2023 at 03:00:52PM +0300, Kirill A. Shutemov wrote: > On Mon, Jan 30, 2023 at 12:36:34PM +0100, Christophe de Dinechin wrote: > > Is there for example anything that precludes TDX or SEV from executing > > code in the bounce buffers? > > In TDX, attempt to fetch instructions from shared memory (i.e. bounce > buffer) will cause #GP, only data fetch is allowed. Page table also cannot > be placed there and will cause the same #GP.
Same with SEV IIRC.
-- MST
| |