Paolo Bonzini <pbonzini@xxxxxxxxxx> writes:
> On 1/3/22 13:56, Vitaly Kuznetsov wrote:
>> 'allowlist' of things which can change (and put
>> *APICids there) and only fail KVM_SET_CPUID{,2} when we see something
>> else changing.
>
> We could also go the other way and only deny changes that result in
> changed CPU caps. That should be easier to implement since we have
> already a mapping from CPU capability words to CPUID leaves and registers.
>
Good idea, I'll look into it (if noone beats me to it).
--
Vitaly
