> UMIP (User-Mode Instruction Prevention) is a feature of future Intel > processors (Cannonlake?) that blocks SLDT, SGDT, STR, SIDT and SMSW from > user-mode processes. > > The idea here is to use virtualization intercepts to emulate UMIP; it slows > down the instructions when they're executed in ring 0, but they are really > never executed in practice. On AMD systems it's possible to emulate it > entirely; instead on Intel systems it's *almost* possible to emulate it, > because SMSW doesn't cause a vmexit, and hence SMSW will not fault. > > This patch series provides the infrastructure and implements it on Intel. I > tested it through kvm-unit-tests. > > Still I think the idea is interesting, even if it's buggy for current Intel > processors. Any opinions? Hi Paolo, We intended to enable UMIP for KVM and found you had already worked on it. Do you have any plan for the following patch set? It's there anything else you expect us help to do? Thanks! Liang -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
