On Thu, Jan 09, 2020 at 09:57:20AM -0500, Peter Xu wrote: > + /* If to map any writable page within dirty ring, fail it */ > + if ((kvm_page_in_dirty_ring(vcpu->kvm, vma->vm_pgoff) || > + kvm_page_in_dirty_ring(vcpu->kvm, vma->vm_pgoff + pages - 1)) && > + vma->vm_flags & VM_WRITE) > + return -EINVAL; Worth thinking about other flags. Do we want to force VM_SHARED? Disable VM_EXEC?