On 1/3/22 13:56, Vitaly Kuznetsov wrote:
'allowlist' of things which can change (and put
*APICids there) and only fail KVM_SET_CPUID{,2} when we see something
else changing.
We could also go the other way and only deny changes that result in changed CPU caps. That should be easier to implement since we have already a mapping from CPU capability words to CPUID leaves and registers.
Paolo
