On Tue, Oct 15, 2024 at 08:13:28AM +0000, Pranjal Shrivastava wrote: > Umm.. this was specific for rmr not a generic thing. I'd suggest to > avoid meddling with the STEs directly for acheiving bypass. Playing > with the iommu domain type could be neater. Perhaps, modify the > ops->def_domain_type to return an appropriate domain? Yeah, that is the expected way, to force the def_domain_type to IDENTITY and refuse to attach a PAGING/BLOCKED domain. If this is a common thing we could have the core code take on more of the job. Jason