| Date | Wed, 8 Nov 2023 13:45:38 +0100 | Subject | Re: [RFC 30/33] KVM: x86: hyper-v: Introduce KVM_REQ_HV_INJECT_INTERCEPT request | From | Alexander Graf <> |
| |
On 08.11.23 12:18, Nicolas Saenz Julienne wrote: > Introduce a new request type, KVM_REQ_HV_INJECT_INTERCEPT which allows > injecting out-of-band Hyper-V secure intercepts. For now only memory > access intercepts are supported. These are triggered when access a GPA > protected by a higher VTL. The memory intercept metadata is filled based > on the GPA provided through struct kvm_vcpu_hv_intercept_info, and > injected into the guest through SynIC message. > > Signed-off-by: Nicolas Saenz Julienne <nsaenz@amazon.com>
IMHO memory protection violations should result in a user space exit. User space can then validate what to do with the violation and if necessary inject an intercept.
That means from an API point of view, you want a new exit reason (violation) and an ioctl that allows you to transmit the violating CPU state into the target vCPU. I don't think the injection should even know that the source of data for the violation was a vCPU.
Alex
Amazon Development Center Germany GmbH Krausenstr. 38 10117 Berlin Geschaeftsfuehrung: Christian Schlaeger, Jonathan Weiss Eingetragen am Amtsgericht Charlottenburg unter HRB 149173 B Sitz: Berlin Ust-ID: DE 289 237 879
|