-This capability indicates that KVM supports that accesses to user defined MSRsDo you mean accesses to user defined MSRs*that* may be rejected?
+This capability indicates that KVM supports accesses to user defined MSRs
may be rejected. With this capability exposed, KVM exports new VM ioctl
KVM_X86_SET_MSR_FILTER which user space can call to specify bitmaps of MSR
ranges that KVM should deny access to.
Thanks.