On Sun, Feb 21, 2010 at 06:38:36PM +0200, Avi Kivity wrote: > Simplified, this is > > ioctl(vcpu_fd, KVM_VCPU_FREEZE, 0); > > no need to involve the entire vm IMO. Since the vcpu thread is issuing > the ioctl, the vcpu isn't running. True. Should also work, there is no information stored there which could allow the l1 guest to break out if it is modified. At least for SVM, not sure if this is true for vmx. Joerg -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html