On 2/3/21 9:43 AM, Paolo Bonzini wrote: > On 03/02/21 18:36, Sean Christopherson wrote: >> I'm not at all opposed to preventing KVM from accessing EPC, but I >> really don't want to add a special check in KVM to avoid reading EPC. >> KVM generally isn't aware of physical backings, and the relevant KVM >> code is shared between all architectures. > > Yeah, special casing KVM is almost always the wrong thing to do. > Anything that KVM can do, other subsystems will do as well. Agreed. Thwarting ioremap itself seems like the right way to go.