On 5/30/23 11:52, Peter Zijlstra wrote: >> That should really say that a nested #HV should never be raised by the >> hypervisor, but if it is, then the guest should detect that and >> self-terminate knowing that the hypervisor is possibly being malicious. > I've yet to see code that can do that reliably. By "#HV should never be raised by the hypervisor", I think Tom means: #HV can and will be raised by malicious hypervisors and the guest must be able to unambiguously handle it in a way that will not result in the guest getting rooted. Right? ;)
