> > Well, it is unlocked_ioctl() and snp_guest_ioctl() is not taking any locks. > What's stopping anyone from writing a nasty little program which hammers the > sev-guest on the ioctl interface until the OOM killer activates? > Given sev-guest requires heightened privileges, can we not assume a reasonable user space? I thought that was an organizing principle. > IOW, this should probably remain _ACCOUNT AFAICT. > > -- > Regards/Gruss, > Boris. > > https://people.kernel.org/tglx/notes-about-netiquette > -- -Dionna Glaze, PhD, CISSP, CCSP (she/her)
