On Tue, Dec 10, 2024 at 11:15:13AM +0800, Yi Liu wrote: > > Why can't it be in iommufd? A PASID domain should be a hwpt_paging > > with the ALLOC_PASID flag, just put a bit in the hwpt_paging struct > > and be done with it. That automatically rejects nested domains from > > pasid. > > The problem is Intel side, we allow attaching nested domains to pasid. :( > That's why I'm asking for updating the description of ALLOC_PASID and > the enforcement to be only applicable to paging domains, not applicable for > nested domains. Seems reasonable Jason