Re: [PATCH 2/2] KVM: x86: Forbid KVM_SET_CPUID{,2} after KVM_RUN
From: Paolo Bonzini
Date: Wed Jan 05 2022 - 04:11:19 EST
On 1/3/22 13:56, Vitaly Kuznetsov wrote:
'allowlist' of things which can change (and put
*APICids there) and only fail KVM_SET_CPUID{,2} when we see something
else changing.
We could also go the other way and only deny changes that result in
changed CPU caps. That should be easier to implement since we have
already a mapping from CPU capability words to CPUID leaves and registers.
Paolo