On 15/09/2017 15:06, Mihai Donțu wrote: >> Do you need events for reading CRn or MSRs? > > There is another VMI project, Nitro, that uses MSR read events to do a > sort of strace on syscalls and we were thinking on porting that > feature. However, users of that API with which we are in contact, > expressed the intention of moving to a breakpoint based system rather > than trapping for every MSR read. Since we don't have a use case for it > either, we decided to hold off on that unless somebody jumps in and > asks for it. I was thinking of the case where introspection has to modify some MSRs or CRs, and would like the guest kernel to see a fake value. Paolo
