On Fri, Mar 03, 2023, Binbin Wu wrote: > > On 3/2/2023 9:16 PM, Robert Hoo wrote: > > On Thu, 2023-03-02 at 14:41 +0800, Binbin Wu wrote: > > > __linearize is not the only path the modified LAM canonical check > > > needed, also some vmexits path should be taken care of, like VMX, > > > SGX > > > ENCLS. > > > > > SGX isn't in this version's implementation's scope, like nested LAM. > > LAM in SGX enclave mode is not the scope of the this version. I'm not merging half-baked support. Not supporting nested LAM _may_ be ok, because KVM can _prevent_ exposing LAM to L2. I say "may" because I would still _very_ strongly prefer that nested support be added in the initial series. But omitting architectural interactions just because is not going to happen.